← CVE Intelligence

CVE-2023-52755

ksmbd: fix slab out of bounds write in smb_inherit_dacl() PUBLISHED

Description (CNA)

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix slab out of bounds write in smb_inherit_dacl() slab out-of-bounds write is caused by that offsets is bigger than pntsd allocation size. This patch add the check to validate 3 offsets using allocation size.

Affected (CNA)

Vendor / productVersions
Linux / Linuxaffected 0626e6641f6b467447c81dd7678a69c66f7746cf before aaf0a07d60887d6c36fc46a24de0083744f07819; affected 0626e6641f6b467447c81dd7678a69c66f7746cf before 8387c94d73ec66eb597c7a23a8d9eadf64bfbafa; affected 0626e6641f6b467447c81dd7678a69c66f7746cf before 09d9d8b40a3338193619c14ed4dc040f4f119e70; affected 0626e6641f6b467447c81dd7678a69c66f7746cf before 712e01f32e577e7e48ab0adb5fe550646a3d93cb; affected 0626e6641f6b467447c81dd7678a69c66f7746cf before eebff19acaa35820cb09ce2ccb3d21bee2156ffb
Linux / Linuxaffected 5.15; unaffected 0 before 5.15; unaffected 5.15.140 through 5.15.*; unaffected 6.1.64 through 6.1.*; unaffected 6.5.13 through 6.5.*; unaffected 6.6.3 through 6.6.*; unaffected 6.7 through *

CWE

No CWE identifiers supplied.

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.