CVE Catalog
CVE-2023-38430
CriticalCVSS 9.1Exploitation Probability (EPSS)
Elevated risk1.06%
60th percentile - higher than 60% of all known CVEs
Summary
An issue was discovered in the Linux kernel before version 6.3.9, where ksmbd does not validate the SMB request protocol ID, leading to an out-of-bounds read.
Risk Assessment
The lack of protocol ID validation may allow attackers to access unauthorized data, posing a serious threat to system integrity.
Recommendation
It is recommended to update the Linux kernel to version 6.3.9 or later to mitigate this vulnerability.
Original NVD description (English source)
An issue was discovered in the Linux kernel before 6.3.9. ksmbd does not validate the SMB request protocol ID, leading to an out-of-bounds read.