VulnerabilityAnalyzed

CVE-2023-39180

An attacker can leverage this to create a denial-of-service condition on affected installations of Linux.

HIGH 7.5EPSS 1.44%

Does this matter?

High impact if exploited, but EPSS currently rates exploitation as unlikely (1.44%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.

Description

A flaw was found within the handling of SMB2_READ commands in the kernel ksmbd module. The issue results from not releasing memory after its effective lifetime. An attacker can leverage this to create a denial-of-service condition on affected installations of Linux. Authentication is not required to exploit this vulnerability, but only systems with ksmbd enabled are vulnerable.

CVSS 3.1: 7.5 HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS: 1.44% probability · 72th percentile
CISA KEV: Not listed
Weakness: CWE-400, CWE-125
Affected: linux/linux kernel
Source: patrick@puiterwijk.org

References

https://access.redhat.com/security/cve/CVE-2023-39180Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2326531Issue Tracking, Third Party Advisory
https://www.zerodayinitiative.com/advisories/ZDI-24-589/Third Party Advisory

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.