NULL pointer dereference in Linux kernel - CVE-2023-32252

Vulnerability identifier: #VU80492

CSH Severity: Medium

CVSS v4: 8.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2023-32252

CWE-ID: CWE-476

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to a NULL pointer dereference error when handling SMB2_LOGOFF commands in ksmbd. A remote attacker can send specially crafted data to the server and perform a denial of service (DoS) attack.

Linux kernel
Ubuntu
linux-image-virtual (Ubuntu package)
linux-image-generic-lpae (Ubuntu package)
linux-image-generic-64k (Ubuntu package)
linux-image-generic (Ubuntu package)
linux-image-lowlatency (Ubuntu package)
linux-image-lowlatency-64k (Ubuntu package)
linux-image-5.15.0-94-lowlatency-64k (Ubuntu package)
linux-image-5.15.0-94-lowlatency (Ubuntu package)
linux-image-5.15.0-94-generic-64k (Ubuntu package)
linux-image-5.15.0-94-generic-lpae (Ubuntu package)
linux-image-5.15.0-94-generic (Ubuntu package)
linux-image-lowlatency-64k-hwe-20.04 (Ubuntu package)
linux-image-lowlatency-hwe-20.04 (Ubuntu package)
linux-image-generic-hwe-20.04 (Ubuntu package)
linux-image-generic-lpae-hwe-20.04 (Ubuntu package)
linux-image-oem-20.04 (Ubuntu package)
linux-image-oem-20.04b (Ubuntu package)
linux-image-oem-20.04c (Ubuntu package)
linux-image-oem-20.04d (Ubuntu package)
linux-image-virtual-hwe-20.04 (Ubuntu package)
linux-image-generic-64k-hwe-20.04 (Ubuntu package)
linux-image-gkeop-5.15 (Ubuntu package)
linux-image-gkeop (Ubuntu package)
linux-image-5.15.0-1036-gkeop (Ubuntu package)
linux-image-nvidia-lowlatency (Ubuntu package)
linux-image-5.15.0-1044-nvidia (Ubuntu package)
linux-image-5.15.0-1044-nvidia-lowlatency (Ubuntu package)
linux-image-nvidia (Ubuntu package)
linux-image-ibm (Ubuntu package)
linux-image-raspi (Ubuntu package)
linux-image-raspi-nolpae (Ubuntu package)
linux-image-5.15.0-1046-raspi (Ubuntu package)
linux-image-5.15.0-1046-ibm (Ubuntu package)
linux-image-5.15.0-1047-intel-iotg (Ubuntu package)
linux-image-5.15.0-1048-intel-iotg (Ubuntu package)
linux-image-kvm (Ubuntu package)
linux-image-gke (Ubuntu package)
linux-image-gke-5.15 (Ubuntu package)
linux-image-5.15.0-1050-kvm (Ubuntu package)
linux-image-5.15.0-1050-gke (Ubuntu package)
linux-image-oracle (Ubuntu package)
linux-image-oracle-lts-22.04 (Ubuntu package)
linux-image-gcp-lts-22.04 (Ubuntu package)
linux-image-5.15.0-1051-oracle (Ubuntu package)
linux-image-gcp (Ubuntu package)
linux-image-5.15.0-1051-gcp (Ubuntu package)
linux-image-aws-lts-22.04 (Ubuntu package)
linux-image-5.15.0-1053-aws (Ubuntu package)
linux-image-aws (Ubuntu package)
linux-image-azure-lts-22.04 (Ubuntu package)
linux-image-5.15.0-1056-azure (Ubuntu package)
linux-image-5.15.0-1056-azure-fde (Ubuntu package)
linux-image-azure-fde (Ubuntu package)
linux-image-azure-cvm (Ubuntu package)
linux-image-azure (Ubuntu package)
linux-image-azure-fde-lts-22.04 (Ubuntu package)
linux-image-6.2.0-32-generic-lpae (Ubuntu package)
linux-image-6.2.0-32-generic-64k (Ubuntu package)
linux-image-6.2.0-32-generic (Ubuntu package)
linux-image-virtual-hwe-22.04 (Ubuntu package)
linux-image-generic-64k-hwe-22.04 (Ubuntu package)
linux-image-generic-hwe-22.04 (Ubuntu package)
linux-image-generic-lpae-hwe-22.04 (Ubuntu package)
linux-image-6.2.0-1004-starfive (Ubuntu package)
linux-image-starfive (Ubuntu package)
linux-image-6.2.0-1009-ibm (Ubuntu package)
linux-image-6.2.0-1011-azure (Ubuntu package)
linux-image-6.2.0-1011-oracle (Ubuntu package)
linux-image-6.2.0-1011-aws (Ubuntu package)
linux-image-6.2.0-1012-kvm (Ubuntu package)
linux-image-6.2.0-1012-lowlatency-64k (Ubuntu package)
linux-image-6.2.0-1012-lowlatency (Ubuntu package)
linux-image-lowlatency-64k-hwe-22.04 (Ubuntu package)
linux-image-lowlatency-hwe-22.04 (Ubuntu package)
linux-image-6.2.0-1012-raspi (Ubuntu package)
linux-image-6.2.0-1013-gcp (Ubuntu package)
linux-image-intel-iotg (Ubuntu package)
linux-image-intel (Ubuntu package)

Install updates from vendor's website.

linux-image-virtual (Ubuntu package) - addressed in versions 5.15.0.94.91, 6.2.0.32.32
linux-image-generic-lpae (Ubuntu package) - addressed in versions 5.15.0.94.91, 6.2.0.32.32
linux-image-generic-64k (Ubuntu package) - addressed in versions 5.15.0.94.91, 6.2.0.32.32
linux-image-generic (Ubuntu package) - addressed in versions 5.15.0.94.91, 6.2.0.32.32
linux-image-lowlatency (Ubuntu package) - addressed in versions 5.15.0.94.94, 6.2.0.1012.12
linux-image-lowlatency-64k (Ubuntu package) - addressed in versions 5.15.0.94.94, 6.2.0.1012.12
linux-image-5.15.0-94-lowlatency-64k (Ubuntu package) - update to 5.15.0-94.104~20.04.1
linux-image-5.15.0-94-lowlatency (Ubuntu package) - update to 5.15.0-94.104~20.04.1
linux-image-5.15.0-94-generic-64k (Ubuntu package) - update to 5.15.0-94.104~20.04.1
linux-image-5.15.0-94-generic-lpae (Ubuntu package) - update to 5.15.0-94.104~20.04.1
linux-image-5.15.0-94-generic (Ubuntu package) - update to 5.15.0-94.104~20.04.1
linux-image-lowlatency-64k-hwe-20.04 (Ubuntu package) - update to 5.15.0.94.104~20.04.47
linux-image-lowlatency-hwe-20.04 (Ubuntu package) - update to 5.15.0.94.104~20.04.47
linux-image-generic-hwe-20.04 (Ubuntu package) - update to 5.15.0.94.104~20.04.50
linux-image-generic-lpae-hwe-20.04 (Ubuntu package) - update to 5.15.0.94.104~20.04.50
linux-image-oem-20.04 (Ubuntu package) - update to 5.15.0.94.104~20.04.50
linux-image-oem-20.04b (Ubuntu package) - update to 5.15.0.94.104~20.04.50
linux-image-oem-20.04c (Ubuntu package) - update to 5.15.0.94.104~20.04.50
linux-image-oem-20.04d (Ubuntu package) - update to 5.15.0.94.104~20.04.50
linux-image-virtual-hwe-20.04 (Ubuntu package) - update to 5.15.0.94.104~20.04.50
linux-image-generic-64k-hwe-20.04 (Ubuntu package) - update to 5.15.0.94.104~20.04.50
linux-image-gkeop-5.15 (Ubuntu package) - addressed in versions 5.15.0.1036.35, 5.15.0.1036.42~20.04.32
linux-image-gkeop (Ubuntu package) - update to 5.15.0.1036.35
linux-image-5.15.0-1036-gkeop (Ubuntu package) - update to 5.15.0-1036.42~20.04.1
linux-image-nvidia-lowlatency (Ubuntu package) - update to 5.15.0.1044.44
linux-image-5.15.0-1044-nvidia (Ubuntu package) - update to 5.15.0-1044.44
linux-image-5.15.0-1044-nvidia-lowlatency (Ubuntu package) - update to 5.15.0-1044.44
linux-image-nvidia (Ubuntu package) - update to 5.15.0.1044.44
linux-image-ibm (Ubuntu package) - addressed in versions 5.15.0.1046.42, 5.15.0.1046.49~20.04.18, 6.2.0.1009.9
linux-image-raspi (Ubuntu package) - addressed in versions 5.15.0.1046.44, 6.2.0.1012.15
linux-image-raspi-nolpae (Ubuntu package) - addressed in versions 5.15.0.1046.44, 6.2.0.1012.15
linux-image-5.15.0-1046-raspi (Ubuntu package) - update to 5.15.0-1046.49
linux-image-5.15.0-1046-ibm (Ubuntu package) - update to 5.15.0-1046.49~20.04.1
linux-image-intel-iotg (Ubuntu package) - addressed in versions 5.15.0.1047.47, 5.15.0.1048.54~20.04.38
linux-image-5.15.0-1047-intel-iotg (Ubuntu package) - update to 5.15.0-1047.53
linux-image-5.15.0-1048-intel-iotg (Ubuntu package) - update to 5.15.0-1048.54~20.04.1
linux-image-intel (Ubuntu package) - update to 5.15.0.1048.54~20.04.38
linux-image-kvm (Ubuntu package) - addressed in versions 5.15.0.1050.46, 6.2.0.1012.12
linux-image-gke (Ubuntu package) - update to 5.15.0.1050.49
linux-image-gke-5.15 (Ubuntu package) - update to 5.15.0.1050.49
linux-image-5.15.0-1050-kvm (Ubuntu package) - update to 5.15.0-1050.55
linux-image-5.15.0-1050-gke (Ubuntu package) - update to 5.15.0-1050.55
linux-image-oracle (Ubuntu package) - addressed in versions 5.15.0.1051.46, 5.15.0.1051.57~20.04.1, 6.2.0.1011.11
linux-image-oracle-lts-22.04 (Ubuntu package) - update to 5.15.0.1051.46
linux-image-gcp-lts-22.04 (Ubuntu package) - update to 5.15.0.1051.47
linux-image-5.15.0-1051-oracle (Ubuntu package) - update to 5.15.0-1051.57~20.04.1
linux-image-gcp (Ubuntu package) - addressed in versions 5.15.0.1051.59~20.04.1, 6.2.0.1013.13, 6.2.0.1013.13~22.04.1
linux-image-5.15.0-1051-gcp (Ubuntu package) - update to 5.15.0-1051.59~20.04.1
linux-image-aws-lts-22.04 (Ubuntu package) - update to 5.15.0.1053.52
linux-image-5.15.0-1053-aws (Ubuntu package) - update to 5.15.0-1053.58~20.04.1
linux-image-aws (Ubuntu package) - addressed in versions 5.15.0.1053.58~20.04.41, 6.2.0.1011.11~22.04.1, 6.2.0.1011.12
linux-image-azure-lts-22.04 (Ubuntu package) - update to 5.15.0.1056.52
linux-image-5.15.0-1056-azure (Ubuntu package) - addressed in versions 5.15.0-1056.64, 5.15.0-1056.64~20.04.1
linux-image-5.15.0-1056-azure-fde (Ubuntu package) - addressed in versions 5.15.0-1056.64.1, 5.15.0-1056.64~20.04.1.1
linux-image-azure-fde (Ubuntu package) - update to 5.15.0.1056.64~20.04.1.34
linux-image-azure-cvm (Ubuntu package) - update to 5.15.0.1056.64~20.04.45
linux-image-azure (Ubuntu package) - addressed in versions 5.15.0.1056.64~20.04.45, 6.2.0.1011.11
linux-image-azure-fde-lts-22.04 (Ubuntu package) - update to 5.15.0.1056.64.34
linux-image-6.2.0-32-generic-lpae (Ubuntu package) - update to 6.2.0-32.32~22.04.1
linux-image-6.2.0-32-generic-64k (Ubuntu package) - update to 6.2.0-32.32~22.04.1
linux-image-6.2.0-32-generic (Ubuntu package) - update to 6.2.0-32.32~22.04.1
linux-image-virtual-hwe-22.04 (Ubuntu package) - update to 6.2.0.32.32~22.04.9
linux-image-generic-64k-hwe-22.04 (Ubuntu package) - update to 6.2.0.32.32~22.04.9
linux-image-generic-hwe-22.04 (Ubuntu package) - update to 6.2.0.32.32~22.04.9
linux-image-generic-lpae-hwe-22.04 (Ubuntu package) - update to 6.2.0.32.32~22.04.9
linux-image-6.2.0-1004-starfive (Ubuntu package) - update to 6.2.0-1004.5
linux-image-starfive (Ubuntu package) - update to 6.2.0.1004.7
linux-image-6.2.0-1009-ibm (Ubuntu package) - update to 6.2.0-1009.9
linux-image-6.2.0-1011-azure (Ubuntu package) - update to 6.2.0-1011.11
linux-image-6.2.0-1011-oracle (Ubuntu package) - update to 6.2.0-1011.11
linux-image-6.2.0-1011-aws (Ubuntu package) - update to 6.2.0-1011.11~22.04.1
linux-image-6.2.0-1012-kvm (Ubuntu package) - update to 6.2.0-1012.12
linux-image-6.2.0-1012-lowlatency-64k (Ubuntu package) - update to 6.2.0-1012.12~22.04.1
linux-image-6.2.0-1012-lowlatency (Ubuntu package) - update to 6.2.0-1012.12~22.04.1
linux-image-lowlatency-64k-hwe-22.04 (Ubuntu package) - update to 6.2.0.1012.12~22.04.9
linux-image-lowlatency-hwe-22.04 (Ubuntu package) - update to 6.2.0.1012.12~22.04.9
linux-image-6.2.0-1012-raspi (Ubuntu package) - update to 6.2.0-1012.14
linux-image-6.2.0-1013-gcp (Ubuntu package) - addressed in versions 6.2.0-1013.13, 6.2.0-1013.13~22.04.1

• https://bugzilla.redhat.com/show_bug.cgi?id=2219815
• https://www.zerodayinitiative.com/advisories/ZDI-23-700/

• Remote denial of service in Linux kernel ksmbd
• Ubuntu update for linux
• Ubuntu update for linux-azure
• Ubuntu update for linux-gcp
• Ubuntu update for linux
• Ubuntu update for linux-intel-iotg
• Ubuntu update for linux-lowlatency
• Ubuntu update for linux-intel-iotg-5.15
• Ubuntu update for linux-azure