Integer overflow in Linux kernel - CVE-2023-38427

Vulnerability identifier: #VU81658

CSH Severity: High

CVSS v4: 8.7 [CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2023-38427

CWE-ID: CWE-190

Exploitation vector: Adjecent network

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to integer overflow within the deassemble_neg_contexts() function in fs/smb/server/smb2pdu.c in ksmbd. A remote attacker can send specially crafted data to ksmbd, trigger an integer overflow and execute arbitrary code on the target system.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.

Linux kernel
Ubuntu
openEuler
kernel-headers
kernel-tools-debuginfo
perf-debuginfo
kernel-source
perf
kernel-debugsource
kernel-debuginfo
kernel-devel
bpftool
kernel-tools-devel
kernel
kernel-tools
bpftool-debuginfo
python3-perf-debuginfo
python3-perf
linux-image-lowlatency (Ubuntu package)
linux-image-lowlatency-64k (Ubuntu package)
linux-image-virtual (Ubuntu package)
linux-image-generic (Ubuntu package)
linux-image-generic-64k (Ubuntu package)
linux-image-generic-lpae (Ubuntu package)
linux-image-virtual-hwe-20.04 (Ubuntu package)
linux-image-5.15.0-102-lowlatency-64k (Ubuntu package)
linux-image-oem-20.04 (Ubuntu package)
linux-image-oem-20.04b (Ubuntu package)
linux-image-5.15.0-102-lowlatency (Ubuntu package)
linux-image-5.15.0-102-generic-lpae (Ubuntu package)
linux-image-oem-20.04c (Ubuntu package)
linux-image-oem-20.04d (Ubuntu package)
linux-image-lowlatency-hwe-20.04 (Ubuntu package)
linux-image-lowlatency-64k-hwe-20.04 (Ubuntu package)
linux-image-5.15.0-102-generic-64k (Ubuntu package)
linux-image-5.15.0-102-generic (Ubuntu package)
linux-image-generic-64k-hwe-20.04 (Ubuntu package)
linux-image-generic-hwe-20.04 (Ubuntu package)
linux-image-generic-lpae-hwe-20.04 (Ubuntu package)
linux-image-gkeop-5.15 (Ubuntu package)
linux-image-gkeop (Ubuntu package)
linux-image-5.15.0-1040-gkeop (Ubuntu package)
linux-image-5.15.0-1048-nvidia-lowlatency (Ubuntu package)
linux-image-5.15.0-1048-nvidia (Ubuntu package)
linux-image-nvidia-lowlatency (Ubuntu package)
linux-image-nvidia (Ubuntu package)
linux-image-ibm (Ubuntu package)
linux-image-raspi-nolpae (Ubuntu package)
linux-image-raspi (Ubuntu package)
linux-image-5.15.0-1050-raspi (Ubuntu package)
linux-image-5.15.0-1050-ibm (Ubuntu package)
linux-image-5.15.0-1052-intel-iotg (Ubuntu package)
linux-image-kvm (Ubuntu package)
linux-image-gke (Ubuntu package)
linux-image-gke-5.15 (Ubuntu package)
linux-image-5.15.0-1054-gke (Ubuntu package)
linux-image-5.15.0-1054-kvm (Ubuntu package)
linux-image-gcp-lts-22.04 (Ubuntu package)
linux-image-oracle-lts-22.04 (Ubuntu package)
linux-image-5.15.0-1055-oracle (Ubuntu package)
linux-image-oracle (Ubuntu package)
linux-image-5.15.0-1055-gcp (Ubuntu package)
linux-image-gcp (Ubuntu package)
linux-image-aws-lts-22.04 (Ubuntu package)
linux-image-5.15.0-1057-aws (Ubuntu package)
linux-image-aws (Ubuntu package)
linux-image-azure-lts-22.04 (Ubuntu package)
linux-image-5.15.0-1060-azure-fde (Ubuntu package)
linux-image-5.15.0-1060-azure (Ubuntu package)
linux-image-azure (Ubuntu package)
linux-image-azure-cvm (Ubuntu package)
linux-image-azure-fde (Ubuntu package)
linux-image-azure-fde-lts-22.04 (Ubuntu package)
linux-image-6.2.0-34-generic-lpae (Ubuntu package)
linux-image-6.2.0-34-generic-64k (Ubuntu package)
linux-image-6.2.0-34-generic (Ubuntu package)
linux-image-generic-lpae-hwe-22.04 (Ubuntu package)
linux-image-generic-hwe-22.04 (Ubuntu package)
linux-image-generic-64k-hwe-22.04 (Ubuntu package)
linux-image-virtual-hwe-22.04 (Ubuntu package)
linux-image-6.2.0-1006-starfive (Ubuntu package)
linux-image-starfive (Ubuntu package)
linux-image-6.2.0-1011-nvidia (Ubuntu package)
linux-image-6.2.0-1011-nvidia-64k (Ubuntu package)
linux-image-nvidia-64k-hwe-22.04 (Ubuntu package)
linux-image-nvidia-hwe-22.04 (Ubuntu package)
linux-image-nvidia-64k-6.2 (Ubuntu package)
linux-image-nvidia-6.2 (Ubuntu package)
linux-image-6.2.0-1013-oracle (Ubuntu package)
linux-image-6.2.0-1013-aws (Ubuntu package)
linux-image-6.2.0-1014-kvm (Ubuntu package)
linux-image-6.2.0-1014-azure (Ubuntu package)
linux-image-6.2.0-1014-lowlatency (Ubuntu package)
linux-image-6.2.0-1014-lowlatency-64k (Ubuntu package)
linux-image-6.2.0-1014-azure-fde (Ubuntu package)
linux-image-lowlatency-64k-hwe-22.04 (Ubuntu package)
linux-image-lowlatency-hwe-22.04 (Ubuntu package)
linux-image-6.2.0-1014-raspi (Ubuntu package)
linux-image-6.2.0-1016-gcp (Ubuntu package)
linux-image-intel-iotg (Ubuntu package)
linux-image-intel (Ubuntu package)

Install updates from vendor's website.

Linux kernel - update to 6.3.8
kernel-headers - addressed in versions 5.10.0-60.106.0.133, 5.10.0-136.44.0.122, 5.10.0-153.22.0.98
kernel-tools-debuginfo - addressed in versions 5.10.0-60.106.0.133, 5.10.0-136.44.0.122, 5.10.0-153.22.0.98
perf-debuginfo - addressed in versions 5.10.0-60.106.0.133, 5.10.0-136.44.0.122, 5.10.0-153.22.0.98
kernel-source - addressed in versions 5.10.0-60.106.0.133, 5.10.0-136.44.0.122, 5.10.0-153.22.0.98
perf - addressed in versions 5.10.0-60.106.0.133, 5.10.0-136.44.0.122, 5.10.0-153.22.0.98
kernel-debugsource - addressed in versions 5.10.0-60.106.0.133, 5.10.0-136.44.0.122, 5.10.0-153.22.0.98
kernel-debuginfo - addressed in versions 5.10.0-60.106.0.133, 5.10.0-136.44.0.122, 5.10.0-153.22.0.98
kernel-devel - addressed in versions 5.10.0-60.106.0.133, 5.10.0-136.44.0.122, 5.10.0-153.22.0.98
bpftool - addressed in versions 5.10.0-60.106.0.133, 5.10.0-136.44.0.122, 5.10.0-153.22.0.98
kernel-tools-devel - addressed in versions 5.10.0-60.106.0.133, 5.10.0-136.44.0.122, 5.10.0-153.22.0.98
kernel - addressed in versions 5.10.0-60.106.0.133, 5.10.0-136.44.0.122, 5.10.0-153.22.0.98
kernel-tools - addressed in versions 5.10.0-60.106.0.133, 5.10.0-136.44.0.122, 5.10.0-153.22.0.98
bpftool-debuginfo - addressed in versions 5.10.0-60.106.0.133, 5.10.0-136.44.0.122, 5.10.0-153.22.0.98
python3-perf-debuginfo - addressed in versions 5.10.0-60.106.0.133, 5.10.0-136.44.0.122, 5.10.0-153.22.0.98
python3-perf - addressed in versions 5.10.0-60.106.0.133, 5.10.0-136.44.0.122, 5.10.0-153.22.0.98
linux-image-lowlatency (Ubuntu package) - addressed in versions 5.15.0.102.98, 6.2.0.1014.14
linux-image-lowlatency-64k (Ubuntu package) - addressed in versions 5.15.0.102.98, 6.2.0.1014.14
linux-image-virtual (Ubuntu package) - addressed in versions 5.15.0.102.99, 6.2.0.34.34
linux-image-generic (Ubuntu package) - addressed in versions 5.15.0.102.99, 6.2.0.34.34
linux-image-generic-64k (Ubuntu package) - addressed in versions 5.15.0.102.99, 6.2.0.34.34
linux-image-generic-lpae (Ubuntu package) - addressed in versions 5.15.0.102.99, 6.2.0.34.34
linux-image-virtual-hwe-20.04 (Ubuntu package) - update to 5.15.0.102.112~20.04.1
linux-image-5.15.0-102-lowlatency-64k (Ubuntu package) - update to 5.15.0-102.112~20.04.1
linux-image-oem-20.04 (Ubuntu package) - update to 5.15.0.102.112~20.04.1
linux-image-oem-20.04b (Ubuntu package) - update to 5.15.0.102.112~20.04.1
linux-image-5.15.0-102-lowlatency (Ubuntu package) - update to 5.15.0-102.112~20.04.1
linux-image-5.15.0-102-generic-lpae (Ubuntu package) - update to 5.15.0-102.112~20.04.1
linux-image-oem-20.04c (Ubuntu package) - update to 5.15.0.102.112~20.04.1
linux-image-oem-20.04d (Ubuntu package) - update to 5.15.0.102.112~20.04.1
linux-image-lowlatency-hwe-20.04 (Ubuntu package) - update to 5.15.0.102.112~20.04.1
linux-image-lowlatency-64k-hwe-20.04 (Ubuntu package) - update to 5.15.0.102.112~20.04.1
linux-image-5.15.0-102-generic-64k (Ubuntu package) - update to 5.15.0-102.112~20.04.1
linux-image-5.15.0-102-generic (Ubuntu package) - update to 5.15.0-102.112~20.04.1
linux-image-generic-64k-hwe-20.04 (Ubuntu package) - update to 5.15.0.102.112~20.04.1
linux-image-generic-hwe-20.04 (Ubuntu package) - update to 5.15.0.102.112~20.04.1
linux-image-generic-lpae-hwe-20.04 (Ubuntu package) - update to 5.15.0.102.112~20.04.1
linux-image-gkeop-5.15 (Ubuntu package) - addressed in versions 5.15.0.1040.39, 5.15.0.1040.46~20.04.36
linux-image-gkeop (Ubuntu package) - update to 5.15.0.1040.39
linux-image-5.15.0-1040-gkeop (Ubuntu package) - update to 5.15.0-1040.46~20.04.1
linux-image-5.15.0-1048-nvidia-lowlatency (Ubuntu package) - update to 5.15.0-1048.48
linux-image-5.15.0-1048-nvidia (Ubuntu package) - update to 5.15.0-1048.48
linux-image-nvidia-lowlatency (Ubuntu package) - update to 5.15.0.1048.48
linux-image-nvidia (Ubuntu package) - update to 5.15.0.1048.48
linux-image-ibm (Ubuntu package) - addressed in versions 5.15.0.1050.46, 5.15.0.1050.53~20.04.1
linux-image-raspi-nolpae (Ubuntu package) - addressed in versions 5.15.0.1050.48, 6.2.0.1014.17
linux-image-raspi (Ubuntu package) - addressed in versions 5.15.0.1050.48, 6.2.0.1014.17
linux-image-5.15.0-1050-raspi (Ubuntu package) - update to 5.15.0-1050.53
linux-image-5.15.0-1050-ibm (Ubuntu package) - update to 5.15.0-1050.53~20.04.1
linux-image-intel-iotg (Ubuntu package) - addressed in versions 5.15.0.1052.52, 5.15.0.1052.58~20.04.1
linux-image-5.15.0-1052-intel-iotg (Ubuntu package) - update to 5.15.0-1052.58~20.04.1
linux-image-intel (Ubuntu package) - update to 5.15.0.1052.58~20.04.1
linux-image-kvm (Ubuntu package) - addressed in versions 5.15.0.1054.50, 6.2.0.1014.14
linux-image-gke (Ubuntu package) - update to 5.15.0.1054.53
linux-image-gke-5.15 (Ubuntu package) - update to 5.15.0.1054.53
linux-image-5.15.0-1054-gke (Ubuntu package) - update to 5.15.0-1054.59
linux-image-5.15.0-1054-kvm (Ubuntu package) - update to 5.15.0-1054.59
linux-image-gcp-lts-22.04 (Ubuntu package) - update to 5.15.0.1055.51
linux-image-oracle-lts-22.04 (Ubuntu package) - update to 5.15.0.1055.51
linux-image-5.15.0-1055-oracle (Ubuntu package) - update to 5.15.0-1055.61~20.04.1
linux-image-oracle (Ubuntu package) - addressed in versions 5.15.0.1055.61~20.04.1, 6.2.0.1013.13
linux-image-5.15.0-1055-gcp (Ubuntu package) - update to 5.15.0-1055.63~20.04.1
linux-image-gcp (Ubuntu package) - addressed in versions 5.15.0.1055.63~20.04.1, 6.2.0.1016.16, 6.2.0.1016.18~22.04.1
linux-image-aws-lts-22.04 (Ubuntu package) - update to 5.15.0.1057.58
linux-image-5.15.0-1057-aws (Ubuntu package) - update to 5.15.0-1057.63~20.04.1
linux-image-aws (Ubuntu package) - addressed in versions 5.15.0.1057.63~20.04.1, 6.2.0.1013.13~22.04.1, 6.2.0.1013.14
linux-image-azure-lts-22.04 (Ubuntu package) - update to 5.15.0.1060.58
linux-image-5.15.0-1060-azure-fde (Ubuntu package) - addressed in versions 5.15.0-1060.69.1, 5.15.0-1060.69~20.04.1.1
linux-image-5.15.0-1060-azure (Ubuntu package) - update to 5.15.0-1060.69~20.04.1
linux-image-azure (Ubuntu package) - addressed in versions 5.15.0.1060.69~20.04.1, 6.2.0.1014.14~22.04.1
linux-image-azure-cvm (Ubuntu package) - update to 5.15.0.1060.69~20.04.1
linux-image-azure-fde (Ubuntu package) - addressed in versions 5.15.0.1060.69~20.04.1.39, 6.2.0.1014.14~22.04.1.11
linux-image-azure-fde-lts-22.04 (Ubuntu package) - update to 5.15.0.1060.69.38
linux-image-6.2.0-34-generic-lpae (Ubuntu package) - update to 6.2.0-34.34~22.04.1
linux-image-6.2.0-34-generic-64k (Ubuntu package) - update to 6.2.0-34.34~22.04.1
linux-image-6.2.0-34-generic (Ubuntu package) - update to 6.2.0-34.34~22.04.1
linux-image-generic-lpae-hwe-22.04 (Ubuntu package) - update to 6.2.0.34.34~22.04.11
linux-image-generic-hwe-22.04 (Ubuntu package) - update to 6.2.0.34.34~22.04.11
linux-image-generic-64k-hwe-22.04 (Ubuntu package) - update to 6.2.0.34.34~22.04.11
linux-image-virtual-hwe-22.04 (Ubuntu package) - update to 6.2.0.34.34~22.04.11
linux-image-6.2.0-1006-starfive (Ubuntu package) - update to 6.2.0-1006.7
linux-image-starfive (Ubuntu package) - update to 6.2.0.1006.9
linux-image-6.2.0-1011-nvidia (Ubuntu package) - update to 6.2.0-1011.11
linux-image-6.2.0-1011-nvidia-64k (Ubuntu package) - update to 6.2.0-1011.11
linux-image-nvidia-64k-hwe-22.04 (Ubuntu package) - update to 6.2.0.1011.13
linux-image-nvidia-hwe-22.04 (Ubuntu package) - update to 6.2.0.1011.13
linux-image-nvidia-64k-6.2 (Ubuntu package) - update to 6.2.0.1011.13
linux-image-nvidia-6.2 (Ubuntu package) - update to 6.2.0.1011.13
linux-image-6.2.0-1013-oracle (Ubuntu package) - update to 6.2.0-1013.13
linux-image-6.2.0-1013-aws (Ubuntu package) - update to 6.2.0-1013.13~22.04.1
linux-image-6.2.0-1014-kvm (Ubuntu package) - update to 6.2.0-1014.14
linux-image-6.2.0-1014-azure (Ubuntu package) - update to 6.2.0-1014.14~22.04.1
linux-image-6.2.0-1014-lowlatency (Ubuntu package) - update to 6.2.0-1014.14~22.04.1
linux-image-6.2.0-1014-lowlatency-64k (Ubuntu package) - update to 6.2.0-1014.14~22.04.1
linux-image-6.2.0-1014-azure-fde (Ubuntu package) - update to 6.2.0-1014.14~22.04.1.1
linux-image-lowlatency-64k-hwe-22.04 (Ubuntu package) - update to 6.2.0.1014.14~22.04.11
linux-image-lowlatency-hwe-22.04 (Ubuntu package) - update to 6.2.0.1014.14~22.04.11
linux-image-6.2.0-1014-raspi (Ubuntu package) - update to 6.2.0-1014.16
linux-image-6.2.0-1016-gcp (Ubuntu package) - update to 6.2.0-1016.18~22.04.1

• https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/fs/smb/server?id=f1a411873c85b642f13b01f21b534c2bab81fc1b
• https://cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.3.8
• https://security.netapp.com/advisory/ntap-20230824-0011/

• Multiple vulnerabilities in Linux kernel ksmbd
• Ubuntu update for linux
• Ubuntu update for linux-nvidia-6.2
• openEuler 22.03 LTS SP1 update for kernel
• openEuler 22.03 LTS SP2 update for kernel
• openEuler 22.03 LTS update for kernel
• Ubuntu update for linux
• Ubuntu update for linux-aws