← Back to browse · API

CVE-2023-52440

Severity
CRITICAL
CVSS
9.8
EPSS
0.21909
Risk score
46.87
CISA KEV
No
PoC
No
Published
2024-02-21
Modified
2026-08-05
First seen
2026-08-05
Aliases
EUVD-2023-57065, GHSA-GR5C-GF9X-WW6Q
Products
Linux:Linux 0626e6641f6b467447c81dd7678a69c66f7746cf <30fd6521b2fbd9b767e438e31945e5ea3e3a2fba, Linux:Linux 0626e6641f6b467447c81dd7678a69c66f7746cf <4b081ce0d830b684fdf967abc3696d1261387254, Linux:Linux 0626e6641f6b467447c81dd7678a69c66f7746cf <7f1d6cb0eb6af3a8088dc24b7ddee9a9711538c4, Linux:Linux 0626e6641f6b467447c81dd7678a69c66f7746cf <bd554ed4fdc3d38404a1c43d428432577573e809, Linux:Linux 0626e6641f6b467447c81dd7678a69c66f7746cf <ecd7e1c562cb08e41957fcd4b0e404de5ab38e20, Linux:Linux 5.15, Linux:Linux patch: 0, Linux:Linux patch: 5.15.145, Linux:Linux patch: 6.1.52, Linux:Linux patch: 6.4.15, Linux:Linux patch: 6.5.2, Linux:Linux patch: 6.6, linux:linux_kernel
Sources
nvd CVE-2023-52440
euvd EUVD-2023-57065

Description

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix slub overflow in ksmbd_decode_ntlmssp_auth_blob() If authblob->SessionKey.Length is bigger than session key size(CIFS_KEY_SIZE), slub overflow can happen in key exchange codes. cifs_arc4_crypt copy to session key array from SessionKey from client.

References