CVE Catalog
CVE-2023-32253
MediumCVSS 5.9Exploitation Probability (EPSS)
Low risk0.29%
20th percentile - higher than 20% of all known CVEs
Summary
A flaw in the Linux kernel's ksmbd component causes a deadlock when multiple concurrent session setup requests are sent, potentially leading to a denial of service.
Risk Assessment
An attacker can remotely trigger a deadlock in the SMB server, blocking access to shared file resources and potentially disrupting the entire infrastructure.
Recommendation
Immediately update the Linux kernel to a version containing the fix for CVE-2023-32253. If an update is not possible, temporarily disable the ksmbd service.
Original NVD description (English source)
A flaw was found in the Linux kernel's ksmbd component. A deadlock is triggered by sending multiple concurrent session setup requests, possibly leading to a denial of service.