CVE-2023-32255

MediumCVSS 5.3

Published: 02/08/2025(UTC)Updated: 30/06/2026(UTC)Translated: 01/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.45%

36th percentile - higher than 36% of all known CVEs

Summary

A memory leak flaw was found in the Linux kernel's ksmbd component. If a client sends a session setup request with an unknown NTLMSSP message type, it can lead to resource exhaustion.

Risk Assessment

The risk is remote memory exhaustion on the SMB server, potentially causing denial of service (DoS) and disrupting network services.

Recommendation

Immediately update the Linux kernel to a version containing the fix for CVE-2023-32255. Also monitor memory availability on servers with ksmbd enabled.

Original NVD description (English source)

A flaw was found in the Linux kernel's ksmbd component. A memory leak can occur if a client sends a session setup request with an unknown NTLMSSP message type, potentially leading to resource exhaustion.