CVE Catalog
CVE-2023-38429
CriticalCVSS 9.8Exploitation Probability (EPSS)
Elevated risk1.08%
61th percentile - higher than 61% of all known CVEs
Summary
An issue was discovered in the Linux kernel before 6.3.4 related to an off-by-one error in memory allocation in fs/ksmbd/connection.c, which may lead to out-of-bounds access.
Risk Assessment
Such an error may allow attackers to access memory, potentially leading to unauthorized data access or system instability.
Recommendation
It is recommended to update the Linux kernel to version 6.3.4 or later to mitigate this vulnerability.
Original NVD description (English source)
An issue was discovered in the Linux kernel before 6.3.4. fs/ksmbd/connection.c in ksmbd has an off-by-one error in memory allocation (because of ksmbd_smb2_check_message) that may lead to out-of-bounds access.