In the Linux kernel, the following vulnerability has been resolved:
ksmbd: fix slub overflow in ksmbddecodentlmsspauthblob()
If authblob->SessionKey.Length is bigger than session key size(CIFSKEYSIZE), slub overflow can happen in key exchange codes. cifsarc4crypt copy to session key array from SessionKey from client.
{
"cna_assigner": "Linux",
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/52xxx/CVE-2023-52440.json"
}