CVE-2023-39176

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2023-39176
A flaw was found within the parsing of SMB2 requests that have a transform header in the kernel ksmbd module. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this to disclose sensitive information on affected installations of Linux. Only systems with ksmbd enabled are vulnerable to this CVE.

5.8 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 1.4

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact LOW

Integrity Impact NONE

Availability Impact NONE

Scope CHANGED

References
Link Resource
https://access.redhat.com/security/cve/CVE-2023-39176 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2326503 Issue Tracking Third Party Advisory
https://www.zerodayinitiative.com/advisories/ZDI-24-586/ Third Party Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*
History

06 Aug 2025, 13:03

Type Values Removed Values Added
CPE cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*
References () https://access.redhat.com/security/cve/CVE-2023-39176 - () https://access.redhat.com/security/cve/CVE-2023-39176 - Third Party Advisory
References () https://bugzilla.redhat.com/show_bug.cgi?id=2326503 - () https://bugzilla.redhat.com/show_bug.cgi?id=2326503 - Issue Tracking, Third Party Advisory
References () https://www.zerodayinitiative.com/advisories/ZDI-24-586/ - () https://www.zerodayinitiative.com/advisories/ZDI-24-586/ - Third Party Advisory
First Time Linux linux Kernel
Linux

18 Nov 2024, 17:11

Type Values Removed Values Added
Summary
  • (es) Se encontró una falla en el análisis de las solicitudes SMB2 que tienen un encabezado de transformación en el módulo ksmbd del kernel. El problema es el resultado de la falta de una validación adecuada de los datos proporcionados por el usuario, lo que puede provocar una lectura más allá del final de un búfer asignado. Un atacante puede aprovechar esto para divulgar información confidencial sobre las instalaciones afectadas de Linux. Solo los sistemas con ksmbd habilitado son vulnerables a esta CVE.

18 Nov 2024, 10:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-11-18 10:15

Updated : 2025-08-06 13:03

NVD link : CVE-2023-39176

Mitre link : CVE-2023-39176

CVE.ORG link : CVE-2023-39176

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-125

Out-of-bounds Read