Resource exhaustion in Linux kernel - CVE-2023-32247

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU80481

Resource exhaustion in Linux kernel - CVE-2023-32247

Published: September 6, 2023


Vulnerability identifier: #VU80481
CSH Severity: Medium
CVSS v4: 8.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2023-32247
CWE-ID: CWE-400
Exploitation vector: Remote access
Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to ksmbd does not properly control consumption of internal resources when handling SMB2_SESSION_SETUP commands. A remote attacker can send specially crafted data to the server during session setup, trigger memory exhaustion and perform a denial of service (DoS) attack.


Affected software

Linux kernel
Ubuntu
openEuler
kernel
kernel-headers
python3-perf-debuginfo
bpftool
kernel-debugsource
kernel-tools-devel
bpftool-debuginfo
kernel-tools
kernel-debuginfo
kernel-devel
perf-debuginfo
kernel-tools-debuginfo
python3-perf
kernel-source
perf
linux-image-lowlatency-64k (Ubuntu package)
linux-image-lowlatency (Ubuntu package)
linux-image-generic (Ubuntu package)
linux-image-generic-64k (Ubuntu package)
linux-image-generic-lpae (Ubuntu package)
linux-image-virtual (Ubuntu package)
linux-image-5.15.0-101-lowlatency-64k (Ubuntu package)
linux-image-5.15.0-101-lowlatency (Ubuntu package)
linux-image-5.15.0-101-generic (Ubuntu package)
linux-image-5.15.0-101-generic-64k (Ubuntu package)
linux-image-5.15.0-101-generic-lpae (Ubuntu package)
linux-image-lowlatency-hwe-20.04 (Ubuntu package)
linux-image-lowlatency-64k-hwe-20.04 (Ubuntu package)
linux-image-virtual-hwe-20.04 (Ubuntu package)
linux-image-oem-20.04d (Ubuntu package)
linux-image-oem-20.04c (Ubuntu package)
linux-image-oem-20.04b (Ubuntu package)
linux-image-oem-20.04 (Ubuntu package)
linux-image-generic-lpae-hwe-20.04 (Ubuntu package)
linux-image-generic-hwe-20.04 (Ubuntu package)
linux-image-generic-64k-hwe-20.04 (Ubuntu package)
linux-image-gkeop (Ubuntu package)
linux-image-gkeop-5.15 (Ubuntu package)
linux-image-5.15.0-1039-gkeop (Ubuntu package)
linux-image-nvidia (Ubuntu package)
linux-image-5.15.0-1047-nvidia (Ubuntu package)
linux-image-5.15.0-1047-nvidia-lowlatency (Ubuntu package)
linux-image-nvidia-lowlatency (Ubuntu package)
linux-image-ibm (Ubuntu package)
linux-image-raspi (Ubuntu package)
linux-image-raspi-nolpae (Ubuntu package)
linux-image-5.15.0-1049-ibm (Ubuntu package)
linux-image-5.15.0-1049-raspi (Ubuntu package)
linux-image-5.15.0-1051-intel-iotg (Ubuntu package)
linux-image-kvm (Ubuntu package)
linux-image-gke-5.15 (Ubuntu package)
linux-image-gke (Ubuntu package)
linux-image-5.15.0-1053-gke (Ubuntu package)
linux-image-5.15.0-1053-kvm (Ubuntu package)
linux-image-oracle-lts-22.04 (Ubuntu package)
linux-image-gcp-lts-22.04 (Ubuntu package)
linux-image-5.15.0-1054-oracle (Ubuntu package)
linux-image-oracle (Ubuntu package)
linux-image-5.15.0-1054-gcp (Ubuntu package)
linux-image-gcp (Ubuntu package)
linux-image-aws-lts-22.04 (Ubuntu package)
linux-image-5.15.0-1056-aws (Ubuntu package)
linux-image-aws (Ubuntu package)
linux-image-azure-lts-22.04 (Ubuntu package)
linux-image-5.15.0-1059-azure (Ubuntu package)
linux-image-5.15.0-1059-azure-fde (Ubuntu package)
linux-image-azure-fde (Ubuntu package)
linux-image-azure-cvm (Ubuntu package)
linux-image-azure (Ubuntu package)
linux-image-azure-fde-lts-22.04 (Ubuntu package)
linux-image-6.2.0-32-generic-lpae (Ubuntu package)
linux-image-6.2.0-32-generic (Ubuntu package)
linux-image-6.2.0-32-generic-64k (Ubuntu package)
linux-image-generic-lpae-hwe-22.04 (Ubuntu package)
linux-image-generic-hwe-22.04 (Ubuntu package)
linux-image-generic-64k-hwe-22.04 (Ubuntu package)
linux-image-virtual-hwe-22.04 (Ubuntu package)
linux-image-6.2.0-1004-starfive (Ubuntu package)
linux-image-starfive (Ubuntu package)
linux-image-6.2.0-1009-ibm (Ubuntu package)
linux-image-6.2.0-1011-oracle (Ubuntu package)
linux-image-6.2.0-1011-azure (Ubuntu package)
linux-image-6.2.0-1011-aws (Ubuntu package)
linux-image-6.2.0-1012-kvm (Ubuntu package)
linux-image-6.2.0-1012-lowlatency-64k (Ubuntu package)
linux-image-6.2.0-1012-lowlatency (Ubuntu package)
linux-image-lowlatency-64k-hwe-22.04 (Ubuntu package)
linux-image-lowlatency-hwe-22.04 (Ubuntu package)
linux-image-6.2.0-1012-raspi (Ubuntu package)
linux-image-6.2.0-1013-gcp (Ubuntu package)
linux-image-intel-iotg (Ubuntu package)
linux-image-intel (Ubuntu package)

How to mitigate CVE-2023-32247

Install updates from vendor's website.

kernel - addressed in versions 5.10.0-60.111.0.138, 5.10.0-136.49.0.127, 5.10.0-153.27.0.103
kernel-headers - addressed in versions 5.10.0-60.111.0.138, 5.10.0-136.49.0.127, 5.10.0-153.27.0.103
python3-perf-debuginfo - addressed in versions 5.10.0-60.111.0.138, 5.10.0-136.49.0.127, 5.10.0-153.27.0.103
bpftool - addressed in versions 5.10.0-60.111.0.138, 5.10.0-136.49.0.127, 5.10.0-153.27.0.103
kernel-debugsource - addressed in versions 5.10.0-60.111.0.138, 5.10.0-136.49.0.127, 5.10.0-153.27.0.103
kernel-tools-devel - addressed in versions 5.10.0-60.111.0.138, 5.10.0-136.49.0.127, 5.10.0-153.27.0.103
bpftool-debuginfo - addressed in versions 5.10.0-60.111.0.138, 5.10.0-136.49.0.127, 5.10.0-153.27.0.103
kernel-tools - addressed in versions 5.10.0-60.111.0.138, 5.10.0-136.49.0.127, 5.10.0-153.27.0.103
kernel-debuginfo - addressed in versions 5.10.0-60.111.0.138, 5.10.0-136.49.0.127, 5.10.0-153.27.0.103
kernel-devel - addressed in versions 5.10.0-60.111.0.138, 5.10.0-136.49.0.127, 5.10.0-153.27.0.103
perf-debuginfo - addressed in versions 5.10.0-60.111.0.138, 5.10.0-136.49.0.127, 5.10.0-153.27.0.103
kernel-tools-debuginfo - addressed in versions 5.10.0-60.111.0.138, 5.10.0-136.49.0.127, 5.10.0-153.27.0.103
python3-perf - addressed in versions 5.10.0-60.111.0.138, 5.10.0-136.49.0.127, 5.10.0-153.27.0.103
kernel-source - addressed in versions 5.10.0-60.111.0.138, 5.10.0-136.49.0.127, 5.10.0-153.27.0.103
perf - addressed in versions 5.10.0-60.111.0.138, 5.10.0-136.49.0.127, 5.10.0-153.27.0.103
linux-image-lowlatency-64k (Ubuntu package) - addressed in versions 5.15.0.101.97, 6.2.0.1012.12
linux-image-lowlatency (Ubuntu package) - addressed in versions 5.15.0.101.97, 6.2.0.1012.12
linux-image-generic (Ubuntu package) - addressed in versions 5.15.0.101.98, 6.2.0.32.32
linux-image-generic-64k (Ubuntu package) - addressed in versions 5.15.0.101.98, 6.2.0.32.32
linux-image-generic-lpae (Ubuntu package) - addressed in versions 5.15.0.101.98, 6.2.0.32.32
linux-image-virtual (Ubuntu package) - addressed in versions 5.15.0.101.98, 6.2.0.32.32
linux-image-5.15.0-101-lowlatency-64k (Ubuntu package) - addressed in versions 5.15.0-101.111, 5.15.0-101.111~20.04.1
linux-image-5.15.0-101-lowlatency (Ubuntu package) - addressed in versions 5.15.0-101.111, 5.15.0-101.111~20.04.1
linux-image-5.15.0-101-generic (Ubuntu package) - addressed in versions 5.15.0-101.111, 5.15.0-101.111~20.04.1
linux-image-5.15.0-101-generic-64k (Ubuntu package) - addressed in versions 5.15.0-101.111, 5.15.0-101.111~20.04.1
linux-image-5.15.0-101-generic-lpae (Ubuntu package) - addressed in versions 5.15.0-101.111, 5.15.0-101.111~20.04.1
linux-image-lowlatency-hwe-20.04 (Ubuntu package) - update to 5.15.0.101.111~20.04.50
linux-image-lowlatency-64k-hwe-20.04 (Ubuntu package) - update to 5.15.0.101.111~20.04.50
linux-image-virtual-hwe-20.04 (Ubuntu package) - update to 5.15.0.101.111~20.04.53
linux-image-oem-20.04d (Ubuntu package) - update to 5.15.0.101.111~20.04.53
linux-image-oem-20.04c (Ubuntu package) - update to 5.15.0.101.111~20.04.53
linux-image-oem-20.04b (Ubuntu package) - update to 5.15.0.101.111~20.04.53
linux-image-oem-20.04 (Ubuntu package) - update to 5.15.0.101.111~20.04.53
linux-image-generic-lpae-hwe-20.04 (Ubuntu package) - update to 5.15.0.101.111~20.04.53
linux-image-generic-hwe-20.04 (Ubuntu package) - update to 5.15.0.101.111~20.04.53
linux-image-generic-64k-hwe-20.04 (Ubuntu package) - update to 5.15.0.101.111~20.04.53
linux-image-gkeop (Ubuntu package) - update to 5.15.0.1039.38
linux-image-gkeop-5.15 (Ubuntu package) - addressed in versions 5.15.0.1039.38, 5.15.0.1039.45~20.04.35
linux-image-5.15.0-1039-gkeop (Ubuntu package) - addressed in versions 5.15.0-1039.45, 5.15.0-1039.45~20.04.1
linux-image-nvidia (Ubuntu package) - update to 5.15.0.1047.47
linux-image-5.15.0-1047-nvidia (Ubuntu package) - update to 5.15.0-1047.47
linux-image-5.15.0-1047-nvidia-lowlatency (Ubuntu package) - update to 5.15.0-1047.47
linux-image-nvidia-lowlatency (Ubuntu package) - update to 5.15.0.1047.47
linux-image-ibm (Ubuntu package) - addressed in versions 5.15.0.1049.45, 5.15.0.1049.52~20.04.21, 6.2.0.1009.9
linux-image-raspi (Ubuntu package) - addressed in versions 5.15.0.1049.47, 6.2.0.1012.15
linux-image-raspi-nolpae (Ubuntu package) - addressed in versions 5.15.0.1049.47, 6.2.0.1012.15
linux-image-5.15.0-1049-ibm (Ubuntu package) - addressed in versions 5.15.0-1049.52, 5.15.0-1049.52~20.04.1
linux-image-5.15.0-1049-raspi (Ubuntu package) - update to 5.15.0-1049.52
linux-image-intel-iotg (Ubuntu package) - addressed in versions 5.15.0.1051.51, 5.15.0.1051.57~20.04.41
linux-image-5.15.0-1051-intel-iotg (Ubuntu package) - addressed in versions 5.15.0-1051.57, 5.15.0-1051.57~20.04.1
linux-image-intel (Ubuntu package) - update to 5.15.0.1051.57~20.04.41
linux-image-kvm (Ubuntu package) - addressed in versions 5.15.0.1053.49, 6.2.0.1012.12
linux-image-gke-5.15 (Ubuntu package) - update to 5.15.0.1053.52
linux-image-gke (Ubuntu package) - update to 5.15.0.1053.52
linux-image-5.15.0-1053-gke (Ubuntu package) - update to 5.15.0-1053.58
linux-image-5.15.0-1053-kvm (Ubuntu package) - update to 5.15.0-1053.58
linux-image-oracle-lts-22.04 (Ubuntu package) - update to 5.15.0.1054.50
linux-image-gcp-lts-22.04 (Ubuntu package) - update to 5.15.0.1054.50
linux-image-5.15.0-1054-oracle (Ubuntu package) - addressed in versions 5.15.0-1054.60, 5.15.0-1054.60~20.04.1
linux-image-oracle (Ubuntu package) - addressed in versions 5.15.0.1054.60~20.04.1, 6.2.0.1011.11
linux-image-5.15.0-1054-gcp (Ubuntu package) - addressed in versions 5.15.0-1054.62, 5.15.0-1054.62~20.04.1
linux-image-gcp (Ubuntu package) - addressed in versions 5.15.0.1054.62~20.04.1, 6.2.0.1013.13, 6.2.0.1013.13~22.04.1
linux-image-aws-lts-22.04 (Ubuntu package) - update to 5.15.0.1056.55
linux-image-5.15.0-1056-aws (Ubuntu package) - addressed in versions 5.15.0-1056.61, 5.15.0-1056.61~20.04.1
linux-image-aws (Ubuntu package) - addressed in versions 5.15.0.1056.61~20.04.43, 6.2.0.1011.11~22.04.1, 6.2.0.1011.12
linux-image-azure-lts-22.04 (Ubuntu package) - update to 5.15.0.1059.55
linux-image-5.15.0-1059-azure (Ubuntu package) - addressed in versions 5.15.0-1059.67, 5.15.0-1059.67~20.04.1
linux-image-5.15.0-1059-azure-fde (Ubuntu package) - addressed in versions 5.15.0-1059.67.1, 5.15.0-1059.67~20.04.1.1
linux-image-azure-fde (Ubuntu package) - update to 5.15.0.1059.67~20.04.1.38
linux-image-azure-cvm (Ubuntu package) - update to 5.15.0.1059.67~20.04.49
linux-image-azure (Ubuntu package) - addressed in versions 5.15.0.1059.67~20.04.49, 6.2.0.1011.11
linux-image-azure-fde-lts-22.04 (Ubuntu package) - update to 5.15.0.1059.67.37
linux-image-6.2.0-32-generic-lpae (Ubuntu package) - update to 6.2.0-32.32~22.04.1
linux-image-6.2.0-32-generic (Ubuntu package) - update to 6.2.0-32.32~22.04.1
linux-image-6.2.0-32-generic-64k (Ubuntu package) - update to 6.2.0-32.32~22.04.1
linux-image-generic-lpae-hwe-22.04 (Ubuntu package) - update to 6.2.0.32.32~22.04.9
linux-image-generic-hwe-22.04 (Ubuntu package) - update to 6.2.0.32.32~22.04.9
linux-image-generic-64k-hwe-22.04 (Ubuntu package) - update to 6.2.0.32.32~22.04.9
linux-image-virtual-hwe-22.04 (Ubuntu package) - update to 6.2.0.32.32~22.04.9
linux-image-6.2.0-1004-starfive (Ubuntu package) - update to 6.2.0-1004.5
linux-image-starfive (Ubuntu package) - update to 6.2.0.1004.7
linux-image-6.2.0-1009-ibm (Ubuntu package) - update to 6.2.0-1009.9
linux-image-6.2.0-1011-oracle (Ubuntu package) - update to 6.2.0-1011.11
linux-image-6.2.0-1011-azure (Ubuntu package) - update to 6.2.0-1011.11
linux-image-6.2.0-1011-aws (Ubuntu package) - update to 6.2.0-1011.11~22.04.1
linux-image-6.2.0-1012-kvm (Ubuntu package) - update to 6.2.0-1012.12
linux-image-6.2.0-1012-lowlatency-64k (Ubuntu package) - update to 6.2.0-1012.12~22.04.1
linux-image-6.2.0-1012-lowlatency (Ubuntu package) - update to 6.2.0-1012.12~22.04.1
linux-image-lowlatency-64k-hwe-22.04 (Ubuntu package) - update to 6.2.0.1012.12~22.04.9
linux-image-lowlatency-hwe-22.04 (Ubuntu package) - update to 6.2.0.1012.12~22.04.9
linux-image-6.2.0-1012-raspi (Ubuntu package) - update to 6.2.0-1012.14
linux-image-6.2.0-1013-gcp (Ubuntu package) - addressed in versions 6.2.0-1013.13, 6.2.0-1013.13~22.04.1

External References

Related Security Bulletins