CVE-2023-52755

CRITICAL 9.8CVE-2023-52755 · Published 21/05/2024 · updated 04/08/2026

In short

CVE-2023-52755 is a CRITICAL (CVSS 9.8) vulnerability.
Chance of exploitation in the next 30 days (EPSS): 28.1%, higher than 98.1% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
—	No affected product versions are listed for this vulnerability yet.

Description

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix slab out of bounds write in smb_inherit_dacl() slab out-of-bounds write is caused by that offsets is bigger than pntsd allocation size. This patch add the check to validate 3 offsets using allocation size.

References

git.kernel.org/stable/c/09d9d8b40a3338193619c14ed4dc040f4f119e70 · Patch
git.kernel.org/stable/c/712e01f32e577e7e48ab0adb5fe550646a3d93cb · Patch
git.kernel.org/stable/c/8387c94d73ec66eb597c7a23a8d9eadf64bfbafa · Patch
git.kernel.org/stable/c/aaf0a07d60887d6c36fc46a24de0083744f07819 · Patch
git.kernel.org/stable/c/eebff19acaa35820cb09ce2ccb3d21bee2156ffb · Patch

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free