#VU94148 Input validation error in Linux kernel - CVE-2023-52442

Vulnerability identifier: #VU94148

Vulnerability risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2023-52442

CWE-ID: CWE-20

Exploitation vector: Local

Exploit availability: No

Vulnerable software:
Linux kernel
Operating systems & Components / Operating system

Vendor: Linux Foundation

Description

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper input validation within the lookup_chann_list(), smb2_get_ksmbd_tcon(), smb2_allocate_rsp_buf() and smb2_check_user_session() functions in fs/ksmbd/smb2pdu.c. A local user can perform a denial of service (DoS) attack.

Mitigation
Install update from vendor's website.

Vulnerable software versions

Linux kernel: All versions

---

External links
https://git.kernel.org/stable/c/017d85c94f02090a87f4a473dbe0d6ee0da72693
https://git.kernel.org/stable/c/becb5191d1d5fdfca0198a2e37457bbbf4fe266f
https://git.kernel.org/stable/c/4c2b350b2e269e3fd17bbfa42de1b42775b777ac
https://git.kernel.org/stable/c/3df0411e132ee74a87aa13142dfd2b190275332e

---

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.