Summary
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen im Linux Kernel ausnutzen, um einen Denial of Service-Zustand herbeizuführen, Informationen offenzulegen, Sicherheitsvorkehrungen zu umgehen, Privilegien zu erweitern und beliebigen Code auszuführen.
Product
Der Kernel stellt den Kern des Linux Betriebssystems dar.
Vulnerabilities 14
-
Critical 9.8
Tree connection race condition remote code execution vulnerability
A flaw was found in the Linux kernel's ksmbd, a high-performance in-kernel SMB server. The specific flaw exists within the processing of SMB2_TREE_DISCONNECT commands. The issue results from the lack of proper locking when performing operations on an object. …
-
Critical 9.1
ksmbd: not allow guest user on multichannel
In the Linux kernel, the following vulnerability has been resolved: ksmbd: not allow guest user on multichannel This patch return STATUS_NOT_SUPPORTED if binding session is guest.
-
Critical 9.0
Session race condition remote code execution vulnerability
A flaw was found in the Linux kernel's ksmbd, a high-performance in-kernel SMB server. The specific flaw exists within the processing of SMB2_SESSION_SETUP commands. The issue results from the lack of proper locking when performing operations on an object. An…
-
High 8.1
Session race condition remote code execution vulnerability
A flaw was found in the Linux kernel's ksmbd, a high-performance in-kernel SMB server. The specific flaw exists within the processing of SMB2_SESSION_SETUP and SMB2_LOGOFF commands. The issue results from the lack of proper locking when performing operations …
-
High 8.1
Session race condition remote code execution vulnerability
A flaw was found in the Linux kernel's ksmbd, a high-performance in-kernel SMB server. The specific flaw exists within the processing of SMB2_LOGOFF and SMB2_CLOSE commands. The issue results from the lack of proper locking when performing operations on an ob…
-
High 7.5
Session setup memory exhaustion denial-of-service vulnerability
A flaw was found in the Linux kernel's ksmbd, a high-performance in-kernel SMB server. The specific flaw exists within the handling of SMB2_SESSION_SETUP commands. The issue results from the lack of control of resource consumption. An attacker can leverage th…
-
High 7.5
Tree connection null pointer dereference denial-of-service vulnerability
A flaw was found in the Linux kernel's ksmbd, a high-performance in-kernel SMB server. The specific flaw exists within the handling of SMB2_TREE_CONNECT and SMB2_QUERY_INFO commands. The issue results from the lack of proper validation of a pointer prior to a…
-
High 7.5
Session null pointer dereference denial-of-service vulnerability
A flaw was found in the Linux kernel's ksmbd, a high-performance in-kernel SMB server. The specific flaw exists within the handling of SMB2_LOGOFF commands. The issue results from the lack of proper validation of a pointer prior to accessing it. An attacker c…
-
High 7.5
Kernel: ksmbd race issue from smb2 close and logoff with multichannel
A flaw was found in the Linux kernel's ksmbd component. A race condition between smb2 close operation and logoff in multichannel connections could result in a use-after-free issue.
-
Medium 5.9
Kernel: ksmbd memory exhaustion denial-of-service vulnerability
A flaw exists within the Linux kernel's handling of new TCP connections. The issue results from the lack of memory release after its effective lifetime. This vulnerability allows an unauthenticated attacker to create a denial of service condition on the syste…
-
Medium 5.9
Kernel: deadlock in ksmbd_find_crypto_ctx()
A flaw was found in the Linux kernel's ksmbd component. A deadlock is triggered by sending multiple concurrent session setup requests, possibly leading to a denial of service.
-
Medium 5.3
Kernel: memory leak via ksmbd session setup request with unknown ntlmssp message type
A flaw was found in the Linux kernel's ksmbd component. A memory leak can occur if a client sends a session setup request with an unknown NTLMSSP message type, potentially leading to resource exhaustion.
-
Low 3.7
Kernel: ksmbd brute force delay bypass via asynchronous requests
A vulnerability has been identified in the Linux kernel's ksmbd component (kernel SMB/CIFS server). A security control designed to prevent dictionary attacks, which introduces a 5-second delay during session setup, can be bypassed through the use of asynchron…
-
Unscored —
ksmbd: call rcu_barrier() in ksmbd_server_exit()
In the Linux kernel, the following vulnerability has been resolved: ksmbd: call rcu_barrier() in ksmbd_server_exit() racy issue is triggered the bug by racing between closing a connection and rmmod. In ksmbd, rcu_barrier() is not called at module unload time,…
Revision history
-
#26
Referenz(en) aufgenommen: EUVD-2023-36513, EUVD-2023-36512
-
#25
Referenz(en) aufgenommen: EUVD-2023-36508
-
#24
Referenz(en) aufgenommen: EUVD-2023-34067
-
#23
Neue Updates von Ubuntu aufgenommen
-
#22
Neue Updates von Ubuntu aufgenommen
-
#21
Neue Updates von Ubuntu aufgenommen
-
#20
Neue Updates von Ubuntu aufgenommen
-
#19
Neue Updates von Ubuntu aufgenommen
-
#18
Neue Updates von Ubuntu aufgenommen
-
#17
Neue Updates von Ubuntu aufgenommen
-
#16
Neue Updates von Ubuntu aufgenommen
-
#15
Neue Updates von Ubuntu aufgenommen
-
#14
Neue Updates von Ubuntu aufgenommen
-
#13
Neue Updates von Ubuntu aufgenommen
-
#12
Neue Updates von Ubuntu aufgenommen
-
#11
Neue Updates von Ubuntu aufgenommen
-
#10
Neue Updates von Ubuntu aufgenommen
-
#9
doppelten Eintrag entfernt
-
#8
Neue Updates von Ubuntu aufgenommen
-
#7
Neue Updates von Ubuntu aufgenommen
-
#6
Neue Updates von Ubuntu aufgenommen
-
#5
Neue Updates von Ubuntu aufgenommen
-
#4
Neue Updates von Debian aufgenommen
-
#3
Bereinigung doppelte Einträge
-
#2
Neue Updates von Ubuntu aufgenommen
References
-
Zero Day Initiative vom 2023-05-17
https://www.zerodayinitiative.com/advisories/ZDI-23-693/
-
Zero Day Initiative vom 2023-05-17
https://www.zerodayinitiative.com/advisories/ZDI-23-694/
-
Zero Day Initiative vom 2023-05-17
https://www.zerodayinitiative.com/advisories/ZDI-23-695/
-
Zero Day Initiative vom 2023-05-17
https://www.zerodayinitiative.com/advisories/ZDI-23-696/
-
Zero Day Initiative vom 2023-05-17
https://www.zerodayinitiative.com/advisories/ZDI-23-697/
-
Zero Day Initiative vom 2023-05-17
https://www.zerodayinitiative.com/advisories/ZDI-23-698/
-
Zero Day Initiative vom 2023-05-17
https://www.zerodayinitiative.com/advisories/ZDI-23-699/
-
Zero Day Initiative vom 2023-05-17
https://www.zerodayinitiative.com/advisories/ZDI-23-700/
-
Zero Day Initiative vom 2023-05-17
https://www.zerodayinitiative.com/advisories/ZDI-23-701/
-
Zero Day Initiative vom 2023-05-17
https://www.zerodayinitiative.com/advisories/ZDI-23-702/
-
Zero Day Initiative vom 2023-05-17
https://www.zerodayinitiative.com/advisories/ZDI-23-703/
-
Zero Day Initiative vom 2023-05-17
https://www.zerodayinitiative.com/advisories/ZDI-23-704/
-
Zero Day Initiative vom 2023-05-17
https://www.zerodayinitiative.com/advisories/ZDI-23-705/
-
Zero Day Initiative vom 2023-05-17
https://www.zerodayinitiative.com/advisories/ZDI-23-706/
-
Ubuntu Security Notice USN-6173-1 vom 2023-06-16
https://ubuntu.com/security/notices/USN-6173-1
-
Debian Security Advisory DSA-5448 vom 2023-07-06
https://www.debian.org/security/2023/dsa-5448
-
Ubuntu Security Notice USN-6283-1 vom 2023-08-11
https://ubuntu.com/security/notices/USN-6283-1
-
Ubuntu Security Notice USN-6300-1 vom 2023-08-17
https://ubuntu.com/security/notices/USN-6300-1
-
Ubuntu Security Notice USN-6311-1 vom 2023-08-29
https://ubuntu.com/security/notices/USN-6311-1
-
Ubuntu Security Notice USN-6332-1 vom 2023-09-01
https://ubuntu.com/security/notices/USN-6332-1
-
Ubuntu Security Notice USN-6338-1 vom 2023-09-06
https://ubuntu.com/security/notices/USN-6338-1
-
Ubuntu Security Notice USN-6344-1 vom 2023-09-06
https://ubuntu.com/security/notices/USN-6344-1
-
Ubuntu Security Notice USN-6347-1 vom 2023-09-06
https://ubuntu.com/security/notices/USN-6347-1
-
Ubuntu Security Notice USN-6338-2 vom 2023-09-09
https://ubuntu.com/security/notices/USN-6338-2
-
Ubuntu Security Notice USN-6626-1 vom 2024-02-08
https://ubuntu.com/security/notices/USN-6626-1
-
Ubuntu Security Notice USN-6628-1 vom 2024-02-09
https://ubuntu.com/security/notices/USN-6628-1
-
Ubuntu Security Notice USN-6626-2 vom 2024-02-14
https://ubuntu.com/security/notices/USN-6626-2
-
Ubuntu Security Notice USN-6628-2 vom 2024-02-15
https://ubuntu.com/security/notices/USN-6628-2
-
Ubuntu Security Notice USN-6626-3 vom 2024-02-16
https://ubuntu.com/security/notices/USN-6626-3
-
Ubuntu Security Notice USN-6705-1 vom 2024-03-20
https://ubuntu.com/security/notices/USN-6705-1
-
Ubuntu Security Notice USN-6704-1 vom 2024-03-20
https://ubuntu.com/security/notices/USN-6704-1
-
Ubuntu Security Notice USN-6704-2 vom 2024-03-21
https://ubuntu.com/security/notices/USN-6704-2
-
Ubuntu Security Notice USN-6704-3 vom 2024-03-26
https://ubuntu.com/security/notices/USN-6704-3
-
Ubuntu Security Notice USN-6704-4 vom 2024-03-28
https://ubuntu.com/security/notices/USN-6704-4
-
Ubuntu Security Notice USN-6725-1 vom 2024-04-09
https://ubuntu.com/security/notices/USN-6725-1
-
Ubuntu Security Notice USN-6725-2 vom 2024-04-16
https://ubuntu.com/security/notices/USN-6725-2