Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.
VOLERION
Volerion Security Research

NOT DEFERRED DATABASE

VULNERABILITIES

CVE-2023-52755 Details

Description

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix slab out of bounds write in smb_inherit_dacl() slab out-of-bounds write is caused by that offsets is bigger than pntsd allocation size. This patch add the check to validate 3 offsets using allocation size.

Metrics

CVSS 3.x Severity and Vector Strings:

CNA: CISA-ADPCVSS-B:8.4 HIGHVector:CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URLSource(s)Tag(s)
https://git.kernel.org/stable/c/09d9d8b40a3338193619c14ed4dc040f4f119e70 kernel.orgPatch
https://git.kernel.org/stable/c/712e01f32e577e7e48ab0adb5fe550646a3d93cb kernel.orgPatch
https://git.kernel.org/stable/c/8387c94d73ec66eb597c7a23a8d9eadf64bfbafa kernel.orgPatch
https://git.kernel.org/stable/c/aaf0a07d60887d6c36fc46a24de0083744f07819 kernel.orgPatch
https://git.kernel.org/stable/c/eebff19acaa35820cb09ce2ccb3d21bee2156ffb kernel.orgPatch

see all 10 references

Weakness Enumeration

CWE-IDCWE NameSource
CWE-787Out-of-bounds WriteCISA-ADP

Affected Products

ProductVersions
linux linux kernel
>= 5.15, < 5.15.140
>= 5.16, < 6.1.64
>= 6.2, < 6.5.13
>= 6.6, < 6.6.3

CPE

  • cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Remediation

  • No remediation found in references.

Change History

8 change records found show changes

QUICK INFO

CVE Dictionary Entry:
CVE-2023-52755
NVD Published Date:
May 21, 2024
NVD Last Modified:
Aug 4, 2026
Source:
kernel.org