CVE-2023-32249

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2023-32249

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-32249.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2023-32249

Downstream

BELL-CVE-2023-32249

DEBIAN-CVE-2023-32249

OESA-2023-1668

OESA-2023-1669

OESA-2023-1670

ROOT-OS-DEBIAN-11-CVE-2023-32249

UBUNTU-CVE-2023-32249

Published

2025-08-16T13:25:49.645Z

Modified

2026-03-11T15:40:13.716251Z

Summary

ksmbd: not allow guest user on multichannel

Details

In the Linux kernel, the following vulnerability has been resolved:

ksmbd: not allow guest user on multichannel

This patch return STATUSNOTSUPPORTED if binding session is guest.

Database specific

{
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/32xxx/CVE-2023-32249.json"
}

References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type: GIT
Repo: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events: Introduced

0626e6641f6b467447c81dd7678a69c66f7746cf

Fixed

ed76d3a8910be06cd4e4ba63bf6075bf903945a1

Fixed

1f0490586544455e5be698be2e6c30077b4ec461

Fixed

4a98e859c4673013385a54084e0cd865695ca072

Fixed

088131b7b01099720a528a72005ff17868705d40

Fixed

3353ab2df5f68dab7da8d5ebb427a2d265a1f2b2

Affected versions

v5.*

v5.13

v5.13-rc2

v5.13-rc3

v5.13-rc4

v5.13-rc5

v5.13-rc6

v5.13-rc7

v5.14

v5.14-rc1

v5.14-rc2

v5.14-rc3

v5.14-rc4

v5.14-rc5

v5.14-rc6

v5.14-rc7

v5.15

v5.15-rc1

v5.15-rc2

v5.15-rc3

v5.15-rc4

v5.15-rc5

v5.15-rc6

v5.15-rc7

v5.15.1

v5.15.10

v5.15.100

v5.15.101

v5.15.102

v5.15.103

v5.15.104

v5.15.105

v5.15.106

v5.15.107

v5.15.108

v5.15.109

v5.15.11

v5.15.110

v5.15.111

v5.15.12

v5.15.13

v5.15.14

v5.15.15

v5.15.16

v5.15.17

v5.15.18

v5.15.19

v5.15.2

v5.15.20

v5.15.21

v5.15.22

v5.15.23

v5.15.24

v5.15.25

v5.15.26

v5.15.27

v5.15.28

v5.15.29

v5.15.3

v5.15.30

v5.15.31

v5.15.32

v5.15.33

v5.15.34

v5.15.35

v5.15.36

v5.15.37

v5.15.38

v5.15.39

v5.15.4

v5.15.40

v5.15.41

v5.15.42

v5.15.43

v5.15.44

v5.15.45

v5.15.46

v5.15.47

v5.15.48

v5.15.49

v5.15.5

v5.15.50

v5.15.51

v5.15.52

v5.15.53

v5.15.54

v5.15.55

v5.15.56

v5.15.57

v5.15.58

v5.15.59

v5.15.6

v5.15.60

v5.15.61

v5.15.62

v5.15.63

v5.15.64

v5.15.65

v5.15.66

v5.15.67

v5.15.68

v5.15.69

v5.15.7

v5.15.70

v5.15.71

v5.15.72

v5.15.73

v5.15.74

v5.15.75

v5.15.76

v5.15.77

v5.15.78

v5.15.79

v5.15.8

v5.15.80

v5.15.81

v5.15.82

v5.15.83

v5.15.84

v5.15.85

v5.15.86

v5.15.87

v5.15.88

v5.15.89

v5.15.9

v5.15.90

v5.15.91

v5.15.92

v5.15.93

v5.15.94

v5.15.95

v5.15.96

v5.15.97

v5.15.98

v5.15.99

v5.16

v5.16-rc1

v5.16-rc2

v5.16-rc3

v5.16-rc4

v5.16-rc5

v5.16-rc6

v5.16-rc7

v5.16-rc8

v5.17

v5.17-rc1

v5.17-rc2

v5.17-rc3

v5.17-rc4

v5.17-rc5

v5.17-rc6

v5.17-rc7

v5.17-rc8

v5.18

v5.18-rc1

v5.18-rc2

v5.18-rc3

v5.18-rc4

v5.18-rc5

v5.18-rc6

v5.18-rc7

v5.19

v5.19-rc1

v5.19-rc2

v5.19-rc3

v5.19-rc4

v5.19-rc5

v5.19-rc6

v5.19-rc7

v5.19-rc8

v6.*

v6.0

v6.0-rc1

v6.0-rc2

v6.0-rc3

v6.0-rc4

v6.0-rc5

v6.0-rc6

v6.0-rc7

v6.1

v6.1-rc1

v6.1-rc2

v6.1-rc3

v6.1-rc4

v6.1-rc5

v6.1-rc6

v6.1-rc7

v6.1-rc8

v6.1.1

v6.1.10

v6.1.11

v6.1.12

v6.1.13

v6.1.14

v6.1.15

v6.1.16

v6.1.17

v6.1.18

v6.1.19

v6.1.2

v6.1.20

v6.1.21

v6.1.22

v6.1.23

v6.1.24

v6.1.25

v6.1.26

v6.1.27

v6.1.3

v6.1.4

v6.1.5

v6.1.6

v6.1.7

v6.1.8

v6.1.9

v6.2

v6.2-rc1

v6.2-rc2

v6.2-rc3

v6.2-rc4

v6.2-rc5

v6.2-rc6

v6.2-rc7

v6.2-rc8

v6.2.1

v6.2.10

v6.2.11

v6.2.12

v6.2.13

v6.2.14

v6.2.2

v6.2.3

v6.2.4

v6.2.5

v6.2.6

v6.2.7

v6.2.8

v6.2.9

v6.3

v6.3-rc1

v6.3-rc2

v6.3-rc3

v6.3-rc4

v6.3-rc5

v6.3-rc6

v6.3-rc7

v6.3.1

Database specific

vanir_signatures

[
    {
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "18235789868979349270066279520988707546",
                "252089479164845733144465819073290789081",
                "328422532917736365522661500371189052605",
                "193296517825138281753051999572864188712",
                "184841138196648678323639118749131099134",
                "283440114042520295281706745366350006829",
                "307782631336868811335779967661941561430",
                "127330891967904931244446054020686862098",
                "289956764980077598907924299813260512365",
                "125517540853731296812070599006385260256",
                "248558041417066394382216609681122397297",
                "175801105614060955161493459476627178967",
                "328448185680413927514043689192721689926",
                "111874817347244103840394925538316696991",
                "269270654027212688140497368116063704739"
            ]
        },
        "signature_version": "v1",
        "deprecated": false,
        "signature_type": "Line",
        "id": "CVE-2023-32249-023fb67a",
        "target": {
            "file": "fs/ksmbd/smb2pdu.c"
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3353ab2df5f68dab7da8d5ebb427a2d265a1f2b2"
    },
    {
        "digest": {
            "length": 4547.0,
            "function_hash": "167622389587545146324281409218243956802"
        },
        "signature_version": "v1",
        "deprecated": false,
        "signature_type": "Function",
        "id": "CVE-2023-32249-2337919a",
        "target": {
            "function": "smb2_sess_setup",
            "file": "fs/ksmbd/smb2pdu.c"
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ed76d3a8910be06cd4e4ba63bf6075bf903945a1"
    },
    {
        "digest": {
            "length": 4601.0,
            "function_hash": "173102405194839659192695893096202579532"
        },
        "signature_version": "v1",
        "deprecated": false,
        "signature_type": "Function",
        "id": "CVE-2023-32249-37aee452",
        "target": {
            "function": "smb2_sess_setup",
            "file": "fs/ksmbd/smb2pdu.c"
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@4a98e859c4673013385a54084e0cd865695ca072"
    },
    {
        "digest": {
            "length": 2793.0,
            "function_hash": "109299130614454960290831989062862839271"
        },
        "signature_version": "v1",
        "deprecated": false,
        "signature_type": "Function",
        "id": "CVE-2023-32249-3f31fb7e",
        "target": {
            "function": "ntlm_authenticate",
            "file": "fs/ksmbd/smb2pdu.c"
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@088131b7b01099720a528a72005ff17868705d40"
    },
    {
        "digest": {
            "length": 4601.0,
            "function_hash": "173102405194839659192695893096202579532"
        },
        "signature_version": "v1",
        "deprecated": false,
        "signature_type": "Function",
        "id": "CVE-2023-32249-50c887ac",
        "target": {
            "function": "smb2_sess_setup",
            "file": "fs/ksmbd/smb2pdu.c"
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@088131b7b01099720a528a72005ff17868705d40"
    },
    {
        "digest": {
            "length": 2793.0,
            "function_hash": "109299130614454960290831989062862839271"
        },
        "signature_version": "v1",
        "deprecated": false,
        "signature_type": "Function",
        "id": "CVE-2023-32249-53945b22",
        "target": {
            "function": "ntlm_authenticate",
            "file": "fs/ksmbd/smb2pdu.c"
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3353ab2df5f68dab7da8d5ebb427a2d265a1f2b2"
    },
    {
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "18235789868979349270066279520988707546",
                "252089479164845733144465819073290789081",
                "328422532917736365522661500371189052605",
                "193296517825138281753051999572864188712",
                "184841138196648678323639118749131099134",
                "283440114042520295281706745366350006829",
                "307782631336868811335779967661941561430",
                "127330891967904931244446054020686862098",
                "289956764980077598907924299813260512365",
                "125517540853731296812070599006385260256",
                "248558041417066394382216609681122397297",
                "175801105614060955161493459476627178967",
                "328448185680413927514043689192721689926",
                "111874817347244103840394925538316696991",
                "269270654027212688140497368116063704739"
            ]
        },
        "signature_version": "v1",
        "deprecated": false,
        "signature_type": "Line",
        "id": "CVE-2023-32249-7b89d355",
        "target": {
            "file": "fs/ksmbd/smb2pdu.c"
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@088131b7b01099720a528a72005ff17868705d40"
    },
    {
        "digest": {
            "length": 2848.0,
            "function_hash": "231527979270899849020287365084810820493"
        },
        "signature_version": "v1",
        "deprecated": false,
        "signature_type": "Function",
        "id": "CVE-2023-32249-7bfce489",
        "target": {
            "function": "ntlm_authenticate",
            "file": "fs/ksmbd/smb2pdu.c"
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ed76d3a8910be06cd4e4ba63bf6075bf903945a1"
    },
    {
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "18235789868979349270066279520988707546",
                "252089479164845733144465819073290789081",
                "328422532917736365522661500371189052605",
                "193296517825138281753051999572864188712",
                "184841138196648678323639118749131099134",
                "283440114042520295281706745366350006829",
                "307782631336868811335779967661941561430",
                "127330891967904931244446054020686862098",
                "289956764980077598907924299813260512365",
                "125517540853731296812070599006385260256",
                "248558041417066394382216609681122397297",
                "175801105614060955161493459476627178967",
                "328448185680413927514043689192721689926",
                "111874817347244103840394925538316696991",
                "269270654027212688140497368116063704739"
            ]
        },
        "signature_version": "v1",
        "deprecated": false,
        "signature_type": "Line",
        "id": "CVE-2023-32249-855cb29e",
        "target": {
            "file": "fs/ksmbd/smb2pdu.c"
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@4a98e859c4673013385a54084e0cd865695ca072"
    },
    {
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "18235789868979349270066279520988707546",
                "252089479164845733144465819073290789081",
                "328422532917736365522661500371189052605",
                "193296517825138281753051999572864188712",
                "184841138196648678323639118749131099134",
                "283440114042520295281706745366350006829",
                "307782631336868811335779967661941561430",
                "127330891967904931244446054020686862098",
                "289956764980077598907924299813260512365",
                "125517540853731296812070599006385260256",
                "248558041417066394382216609681122397297",
                "175801105614060955161493459476627178967",
                "328448185680413927514043689192721689926",
                "111874817347244103840394925538316696991",
                "269270654027212688140497368116063704739"
            ]
        },
        "signature_version": "v1",
        "deprecated": false,
        "signature_type": "Line",
        "id": "CVE-2023-32249-88c5bc3d",
        "target": {
            "file": "fs/ksmbd/smb2pdu.c"
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1f0490586544455e5be698be2e6c30077b4ec461"
    },
    {
        "digest": {
            "length": 2892.0,
            "function_hash": "175581852493386047983513910458799044182"
        },
        "signature_version": "v1",
        "deprecated": false,
        "signature_type": "Function",
        "id": "CVE-2023-32249-90a37b5c",
        "target": {
            "function": "ntlm_authenticate",
            "file": "fs/ksmbd/smb2pdu.c"
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1f0490586544455e5be698be2e6c30077b4ec461"
    },
    {
        "digest": {
            "length": 2955.0,
            "function_hash": "39095338884135553828902217024443160648"
        },
        "signature_version": "v1",
        "deprecated": false,
        "signature_type": "Function",
        "id": "CVE-2023-32249-9d3fc2b1",
        "target": {
            "function": "ntlm_authenticate",
            "file": "fs/ksmbd/smb2pdu.c"
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@4a98e859c4673013385a54084e0cd865695ca072"
    },
    {
        "digest": {
            "length": 4860.0,
            "function_hash": "173946103539211683159263194477983996934"
        },
        "signature_version": "v1",
        "deprecated": false,
        "signature_type": "Function",
        "id": "CVE-2023-32249-cf8c009f",
        "target": {
            "function": "smb2_sess_setup",
            "file": "fs/ksmbd/smb2pdu.c"
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3353ab2df5f68dab7da8d5ebb427a2d265a1f2b2"
    },
    {
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "18235789868979349270066279520988707546",
                "252089479164845733144465819073290789081",
                "328422532917736365522661500371189052605",
                "193296517825138281753051999572864188712",
                "184841138196648678323639118749131099134",
                "283440114042520295281706745366350006829",
                "307782631336868811335779967661941561430",
                "127330891967904931244446054020686862098",
                "289956764980077598907924299813260512365",
                "125517540853731296812070599006385260256",
                "248558041417066394382216609681122397297",
                "175801105614060955161493459476627178967",
                "328448185680413927514043689192721689926",
                "111874817347244103840394925538316696991",
                "269270654027212688140497368116063704739"
            ]
        },
        "signature_version": "v1",
        "deprecated": false,
        "signature_type": "Line",
        "id": "CVE-2023-32249-e39990b0",
        "target": {
            "file": "fs/ksmbd/smb2pdu.c"
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ed76d3a8910be06cd4e4ba63bf6075bf903945a1"
    },
    {
        "digest": {
            "length": 4601.0,
            "function_hash": "173102405194839659192695893096202579532"
        },
        "signature_version": "v1",
        "deprecated": false,
        "signature_type": "Function",
        "id": "CVE-2023-32249-ef76c578",
        "target": {
            "function": "smb2_sess_setup",
            "file": "fs/ksmbd/smb2pdu.c"
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1f0490586544455e5be698be2e6c30077b4ec461"
    }
]

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-32249.json"