SECUFOCUSNOW
Home›CVE index›CVE-2023-52434
Review reviewHigh

CVE-2023-52434

Linux Linux, linux kernel, debian linux

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix potential OOBs in smb2_parse_contexts() Validate offsets and lengths before dereferencing create contexts in smb2_parse_contexts(). This fixes following oops when accessing invalid create contexts from server: BUG: unable to handle page fault for address: ffff8881178d8cc3 #PF: supervisor read access in kernel mode #PF: error_code(0x0000) - not-present page PGD 4a01067 P4D 4a01067 PUD 0 Oops: 0000 [#1] PREEMPT SMP NOPTI CPU: 3 PID: 1736 Comm: mount.cifs Not tainted 6.7.0-rc4 #1 Hardware name: QEMU Standard P...

CVSS
8
EPSS
1.02%
60.1% percentile
CISA KEV
Not listed
Published
2024.02.21
PRIORITY ASSESSMENT

Review review

The CVSS severity warrants an early asset and exposure review.

Known exploitationNot established by KEV
Exploit probability1.02%
Technical severityCVSS 8

Vulnerability overview

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix potential OOBs in smb2_parse_contexts() Validate offsets and lengths before dereferencing create contexts in smb2_parse_contexts(). This fixes following oops when accessing invalid create contexts from server: BUG: unable to handle page fault for address: ffff8881178d8cc3 #PF: supervisor read access in kernel mode #PF: error_code(0x0000) - not-present page PGD 4a01067 P4D 4a01067 PUD 0 Oops: 0000 [#1] PREEMPT SMP NOPTI CPU: 3 PID: 1736 Comm: mount.cifs Not tainted 6.7.0-rc4 #1 Hardware name: QEMU Standard P...

Affected product and versions

Product
Linux Linux, linux kernel, debian linux
Affected versions
>= b8c32dbb0deb287a5fcb78251e4eae6c7275760d < 6726429c18c62dbf5e96ebbd522f262e016553fb, >= b8c32dbb0deb287a5fcb78251e4eae6c7275760d < 13fb0fc4917621f3dfa285a27eaf7151d770b5e5, >= b8c32dbb0deb287a5fcb78251e4eae6c7275760d < 890bc4fac3c0973a49cac35f634579bebba7fe48, >= b8c32dbb0deb287a5fcb78251e4eae6c7275760d < 1ae3c59355dc9882e09c020afe8ffbd895ad0f29, >= b8c32dbb0deb287a5fcb78251e4eae6c7275760d < 17a0f64cc02d4972e21c733d9f21d1c512963afa, >= b8c32dbb0deb287a5fcb78251e4eae6c7275760d < af1689a9b7701d9907dfc84d2a4b57c4bc907144, >= 3.7, >= 5.3 < 5.4.277, >= 5.5 < 5.10.211, >= 5.11 < 5.15.150, >= 5.16 <= 6.1.79, >= 6.2 < 6.6.8, 6.7, 10.0
Fixed versions
5.4.277, 5.10.211, 5.15.150, 6.6.8

Recommended response sequence

Confirm exposure before applying a vendor-supported change.

Full remediation guide
  1. 1
    Identify

    Confirm that Linux Linux, linux kernel, debian linux and an affected version are present.

  2. 2
    Prioritize

    Combine exploitation signals with asset exposure and business criticality.

  3. 3
    Remediate

    Follow the vendor advisory or supported update path and preserve rollback options.

  4. 4
    Verify

    Recheck the version, service health, access paths, and relevant logs.

Technical data

CVSS vector
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE
CWE-119
CVE-2023-52434 — Linux Linux, linux kernel, debian linux | SECUFOCUS NOW