SB2024041852 - Privilege escalation in Linux kernel SMB support
Published: April 18, 2024 Updated: May 14, 2025
Security Bulletin ID
SB2024041852
Severity
Low
Patch available
YES
Number of vulnerabilities
1
Exploitation vector
Local access
Highest impact
Code execution
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 1 security vulnerability.
1) Use-after-free (CVE-ID: CVE-2023-52479)
The vulnerability allows a local user to escalate privileges on the system.
The vulnerability exists due to a use-after-free error within the smb20_oplock_break_ack() function in fs/ksmbd/smb2pdu.c and fs/smb/server/smb2pdu.c. A local user can trigger a use-after-free error and escalate privileges on the system.
Remediation
Install update from vendor's website.
References
- https://git.kernel.org/stable/c/694e13732e830cbbfedb562e57f28644927c33fd
- https://git.kernel.org/stable/c/8226ffc759ea59f10067b9acdf7f94bae1c69930
- https://git.kernel.org/stable/c/d5b0e9d3563e7e314a850e81f42b2ef6f39882f9
- https://git.kernel.org/stable/c/c69813471a1ec081a0b9bf0c6bd7e8afd818afce
- https://mirrors.edge.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.135
- https://mirrors.edge.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.1.57
- https://mirrors.edge.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.5.7
- https://mirrors.edge.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.6