CVE-2023-38427 Integer overflow in n/a
An integer underflow in the Linux kernel's ksmbd server allows attackers to trigger out-of-bounds reads, potentially causing crashes or leaking memory.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2023-38427?
CVE-2023-38427 is a critical vulnerability in Linux kernel, published on 17 Jul 2023. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
An issue was discovered in the Linux kernel before 6.3.8. fs/smb/server/smb2pdu.c in ksmbd has an integer underflow and out-of-bounds read in deassemble_neg_contexts.
Which versions are affected by CVE-2023-38427?
It affects 5 products.
Products include Linux kernel, Netapp H300s, Netapp H410s, Netapp H500s, Netapp H700s.
How do I fix CVE-2023-38427?
Apply the vendor's patch.
Is CVE-2023-38427 being exploited?
There is no known exploitation of CVE-2023-38427 in the wild and no public exploit code.
Other vulnerabilities in Linux kernel
Sources
Also known as AZL-27533, DEBIAN-CVE-2023-38427, GHSA-f4cj-v28g-9hh9, UBUNTU-CVE-2023-38427.