Summary
Ein lokaler Angreifer kann mehrere Schwachstellen im Linux Kernel ausnutzen, um einen nicht näher spezifizierten Angriff durchzuführen.
Product
Der Kernel stellt den Kern des Linux Betriebssystems dar.
Vulnerabilities 3
-
Critical 9.8
ksmbd: fix slub overflow in ksmbd_decode_ntlmssp_auth_blob()
In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix slub overflow in ksmbd_decode_ntlmssp_auth_blob() If authblob->SessionKey.Length is bigger than session key size(CIFS_KEY_SIZE), slub overflow can happen in key exchange codes. cif…
-
Critical 9.1
ksmbd: fix out of bounds in init_smb2_rsp_hdr()
In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix out of bounds in init_smb2_rsp_hdr() If client send smb2 negotiate request and then send smb1 negotiate request, init_smb2_rsp_hdr is called for smb1 negotiate request since need_n…
-
Critical 9.1CVE-2023-52442 EPSS 30%
ksmbd: validate session id and tree id in compound request
In the Linux kernel, the following vulnerability has been resolved: ksmbd: validate session id and tree id in compound request `smb2_get_msg()` in smb2_get_ksmbd_tcon() and smb2_check_user_session() will always return the first request smb2 header in a compou…
Revision history
-
#3
Neue Updates von Ubuntu aufgenommen
-
#2
Neue Updates von Ubuntu aufgenommen
-
#1
Initiale Fassung
References
-
CVE Announce auf lore.kernel.org vom 2024-02-20
http://lore.kernel.org/linux-cve-announce/2024022123-glance-wrinkle-26c1@gregkh/
-
CVE Announce auf lore.kernel.org vom 2024-02-20
http://lore.kernel.org/linux-cve-announce/2024022129-gently-activity-ca7d@gregkh/
-
CVE Announce auf lore.kernel.org vom 2024-02-20
http://lore.kernel.org/linux-cve-announce/2024022132-unvented-arguably-5ea9@gregkh/
-
Ubuntu Security Notice USN-6725-1 vom 2024-04-09
https://ubuntu.com/security/notices/USN-6725-1
-
Ubuntu Security Notice USN-6725-2 vom 2024-04-16
https://ubuntu.com/security/notices/USN-6725-2