CVE-2023-38427

CriticalCVSS 9.8

Published: 18/07/2023(UTC)Updated: 17/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

1.13%

62th percentile - higher than 62% of all known CVEs

Summary

An issue was discovered in the Linux kernel before 6.3.8 related to integer underflow and out-of-bounds read in the deassemble_neg_contexts function in fs/smb/server/smb2pdu.c in ksmbd.

Risk Assessment

This vulnerability may lead to unauthorized memory access, posing a risk of data leakage or system crashes.

Recommendation

It is recommended to update the Linux kernel to version 6.3.8 or later to mitigate this vulnerability.

Original NVD description (English source)

An issue was discovered in the Linux kernel before 6.3.8. fs/smb/server/smb2pdu.c in ksmbd has an integer underflow and out-of-bounds read in deassemble_neg_contexts.