In the Linux kernel, the following vulnerability has been resolved:
ksmbd: fix out of bounds in initsmb2rsp_hdr()
If client send smb2 negotiate request and then send smb1 negotiate request, initsmb2rsphdr is called for smb1 negotiate request since needneg is set to false. This patch ignore smb1 packets after ->need_neg is set to false.
[
{
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@330d900620dfc9893011d725b3620cd2ee0bc2bc",
"deprecated": false,
"id": "CVE-2023-52441-14c866a6",
"target": {
"file": "fs/smb/server/server.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"173352020502345719275340724949288210433",
"280152463001151705998741686463664270931",
"337949439912508131290275700067888545828",
"200619879318667584615608008312590517664",
"72385190931596526652108879029666590024",
"123126215961323645447620909806764606336",
"115847744212080013139259942853543222786",
"158046079938230438873292913319652856441"
]
},
"signature_type": "Line"
},
{
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5c0df9d30c289d6b9d7d44e2a450de2f8e3cf40b",
"deprecated": false,
"id": "CVE-2023-52441-1df90568",
"target": {
"file": "fs/ksmbd/smb_common.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"94283527507762820835921480031921744430",
"6245953505231723122449260122185633930",
"22856095438797024207365219585758977215",
"325378687612157433563645912259933135334",
"269332618840291076650532730920899349340",
"91588852982791714042086114600608151935",
"320523078801493798187400601349863556121",
"223141616982208762824593897946016613602",
"67576445254522037231568963663129297546",
"218720935405026281725529185992420071260",
"110562397915241217497804204398645432489",
"57755987186532112466565507163128348629",
"238925677228058851030594640405314268179",
"15181436838734716300284682690366366920",
"182569640088673986928801047467089324615",
"173472168903660923610619100471375261620",
"337108420877240578752352503045618490434",
"26991962640957932412691148718974727431",
"177583060485094423229452079948732502149",
"200368747966770064670260694944301200201"
]
},
"signature_type": "Line"
},
{
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@536bb492d39bb6c080c92f31e8a55fe9934f452b",
"deprecated": false,
"id": "CVE-2023-52441-2134a153",
"target": {
"file": "fs/smb/server/smb_common.h"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"148088299229925507237150513515050493886",
"156663149646668082094566720819606106630",
"20902030537455997298084895543001475776",
"75275067074480769014427332807197929089"
]
},
"signature_type": "Line"
},
{
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@536bb492d39bb6c080c92f31e8a55fe9934f452b",
"deprecated": false,
"id": "CVE-2023-52441-28c8cb9e",
"target": {
"file": "fs/smb/server/smb_common.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"94283527507762820835921480031921744430",
"6245953505231723122449260122185633930",
"22856095438797024207365219585758977215",
"325378687612157433563645912259933135334",
"269332618840291076650532730920899349340",
"91588852982791714042086114600608151935",
"320523078801493798187400601349863556121",
"223141616982208762824593897946016613602",
"67576445254522037231568963663129297546",
"218720935405026281725529185992420071260",
"110562397915241217497804204398645432489",
"57755987186532112466565507163128348629",
"238925677228058851030594640405314268179",
"15181436838734716300284682690366366920",
"182569640088673986928801047467089324615",
"173472168903660923610619100471375261620",
"337108420877240578752352503045618490434",
"26991962640957932412691148718974727431",
"177583060485094423229452079948732502149",
"200368747966770064670260694944301200201"
]
},
"signature_type": "Line"
},
{
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5c0df9d30c289d6b9d7d44e2a450de2f8e3cf40b",
"deprecated": false,
"id": "CVE-2023-52441-3ba38dd5",
"target": {
"function": "ksmbd_init_smb_server",
"file": "fs/ksmbd/smb_common.c"
},
"digest": {
"function_hash": "67933258489668456761338826885338655824",
"length": 264.0
},
"signature_type": "Function"
},
{
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@aa669ef229ae8dd779da9caa24e254964545895f",
"deprecated": false,
"id": "CVE-2023-52441-5abed757",
"target": {
"file": "fs/smb/server/smb_common.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"94283527507762820835921480031921744430",
"6245953505231723122449260122185633930",
"22856095438797024207365219585758977215",
"325378687612157433563645912259933135334",
"269332618840291076650532730920899349340",
"91588852982791714042086114600608151935",
"320523078801493798187400601349863556121",
"223141616982208762824593897946016613602",
"67576445254522037231568963663129297546",
"218720935405026281725529185992420071260",
"110562397915241217497804204398645432489",
"57755987186532112466565507163128348629",
"238925677228058851030594640405314268179",
"15181436838734716300284682690366366920",
"182569640088673986928801047467089324615",
"173472168903660923610619100471375261620",
"337108420877240578752352503045618490434",
"26991962640957932412691148718974727431",
"177583060485094423229452079948732502149",
"200368747966770064670260694944301200201"
]
},
"signature_type": "Line"
},
{
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@330d900620dfc9893011d725b3620cd2ee0bc2bc",
"deprecated": false,
"id": "CVE-2023-52441-6525d9ce",
"target": {
"function": "init_smb1_server",
"file": "fs/smb/server/smb_common.c"
},
"digest": {
"function_hash": "297770837669402694348054178242000054193",
"length": 165.0
},
"signature_type": "Function"
},
{
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5c0df9d30c289d6b9d7d44e2a450de2f8e3cf40b",
"deprecated": false,
"id": "CVE-2023-52441-65cc9750",
"target": {
"function": "queue_ksmbd_work",
"file": "fs/ksmbd/server.c"
},
"digest": {
"function_hash": "300029010126685008144253383460575099384",
"length": 439.0
},
"signature_type": "Function"
},
{
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@aa669ef229ae8dd779da9caa24e254964545895f",
"deprecated": false,
"id": "CVE-2023-52441-676e166e",
"target": {
"function": "init_smb1_server",
"file": "fs/smb/server/smb_common.c"
},
"digest": {
"function_hash": "297770837669402694348054178242000054193",
"length": 165.0
},
"signature_type": "Function"
},
{
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@aa669ef229ae8dd779da9caa24e254964545895f",
"deprecated": false,
"id": "CVE-2023-52441-72ea921f",
"target": {
"file": "fs/smb/server/smb_common.h"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"148088299229925507237150513515050493886",
"156663149646668082094566720819606106630",
"20902030537455997298084895543001475776",
"75275067074480769014427332807197929089"
]
},
"signature_type": "Line"
},
{
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@536bb492d39bb6c080c92f31e8a55fe9934f452b",
"deprecated": false,
"id": "CVE-2023-52441-77aea9d3",
"target": {
"function": "init_smb1_server",
"file": "fs/smb/server/smb_common.c"
},
"digest": {
"function_hash": "297770837669402694348054178242000054193",
"length": 165.0
},
"signature_type": "Function"
},
{
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@536bb492d39bb6c080c92f31e8a55fe9934f452b",
"deprecated": false,
"id": "CVE-2023-52441-7801899b",
"target": {
"function": "ksmbd_init_smb_server",
"file": "fs/smb/server/smb_common.c"
},
"digest": {
"function_hash": "67933258489668456761338826885338655824",
"length": 264.0
},
"signature_type": "Function"
},
{
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@330d900620dfc9893011d725b3620cd2ee0bc2bc",
"deprecated": false,
"id": "CVE-2023-52441-84742e6b",
"target": {
"file": "fs/smb/server/smb_common.h"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"148088299229925507237150513515050493886",
"156663149646668082094566720819606106630",
"20902030537455997298084895543001475776",
"75275067074480769014427332807197929089"
]
},
"signature_type": "Line"
},
{
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@330d900620dfc9893011d725b3620cd2ee0bc2bc",
"deprecated": false,
"id": "CVE-2023-52441-8b29cd94",
"target": {
"function": "queue_ksmbd_work",
"file": "fs/smb/server/server.c"
},
"digest": {
"function_hash": "300029010126685008144253383460575099384",
"length": 439.0
},
"signature_type": "Function"
},
{
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5c0df9d30c289d6b9d7d44e2a450de2f8e3cf40b",
"deprecated": false,
"id": "CVE-2023-52441-94976abf",
"target": {
"file": "fs/ksmbd/smb_common.h"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"148088299229925507237150513515050493886",
"156663149646668082094566720819606106630",
"20902030537455997298084895543001475776",
"75275067074480769014427332807197929089"
]
},
"signature_type": "Line"
},
{
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@aa669ef229ae8dd779da9caa24e254964545895f",
"deprecated": false,
"id": "CVE-2023-52441-a1d8a3b0",
"target": {
"function": "ksmbd_init_smb_server",
"file": "fs/smb/server/smb_common.c"
},
"digest": {
"function_hash": "67933258489668456761338826885338655824",
"length": 264.0
},
"signature_type": "Function"
},
{
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@aa669ef229ae8dd779da9caa24e254964545895f",
"deprecated": false,
"id": "CVE-2023-52441-a63e50f8",
"target": {
"function": "queue_ksmbd_work",
"file": "fs/smb/server/server.c"
},
"digest": {
"function_hash": "300029010126685008144253383460575099384",
"length": 439.0
},
"signature_type": "Function"
},
{
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@330d900620dfc9893011d725b3620cd2ee0bc2bc",
"deprecated": false,
"id": "CVE-2023-52441-c1ad9bdb",
"target": {
"file": "fs/smb/server/smb_common.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"94283527507762820835921480031921744430",
"6245953505231723122449260122185633930",
"22856095438797024207365219585758977215",
"325378687612157433563645912259933135334",
"269332618840291076650532730920899349340",
"91588852982791714042086114600608151935",
"320523078801493798187400601349863556121",
"223141616982208762824593897946016613602",
"67576445254522037231568963663129297546",
"218720935405026281725529185992420071260",
"110562397915241217497804204398645432489",
"57755987186532112466565507163128348629",
"238925677228058851030594640405314268179",
"15181436838734716300284682690366366920",
"182569640088673986928801047467089324615",
"173472168903660923610619100471375261620",
"337108420877240578752352503045618490434",
"26991962640957932412691148718974727431",
"177583060485094423229452079948732502149",
"200368747966770064670260694944301200201"
]
},
"signature_type": "Line"
},
{
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@aa669ef229ae8dd779da9caa24e254964545895f",
"deprecated": false,
"id": "CVE-2023-52441-c204c124",
"target": {
"file": "fs/smb/server/server.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"173352020502345719275340724949288210433",
"280152463001151705998741686463664270931",
"337949439912508131290275700067888545828",
"200619879318667584615608008312590517664",
"72385190931596526652108879029666590024",
"123126215961323645447620909806764606336",
"115847744212080013139259942853543222786",
"158046079938230438873292913319652856441"
]
},
"signature_type": "Line"
},
{
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5c0df9d30c289d6b9d7d44e2a450de2f8e3cf40b",
"deprecated": false,
"id": "CVE-2023-52441-ced21acd",
"target": {
"file": "fs/ksmbd/server.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"173352020502345719275340724949288210433",
"280152463001151705998741686463664270931",
"337949439912508131290275700067888545828",
"200619879318667584615608008312590517664",
"72385190931596526652108879029666590024",
"123126215961323645447620909806764606336",
"115847744212080013139259942853543222786",
"158046079938230438873292913319652856441"
]
},
"signature_type": "Line"
},
{
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@536bb492d39bb6c080c92f31e8a55fe9934f452b",
"deprecated": false,
"id": "CVE-2023-52441-d1051c01",
"target": {
"function": "queue_ksmbd_work",
"file": "fs/smb/server/server.c"
},
"digest": {
"function_hash": "300029010126685008144253383460575099384",
"length": 439.0
},
"signature_type": "Function"
},
{
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@330d900620dfc9893011d725b3620cd2ee0bc2bc",
"deprecated": false,
"id": "CVE-2023-52441-d354a561",
"target": {
"function": "ksmbd_init_smb_server",
"file": "fs/smb/server/smb_common.c"
},
"digest": {
"function_hash": "67933258489668456761338826885338655824",
"length": 264.0
},
"signature_type": "Function"
},
{
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@536bb492d39bb6c080c92f31e8a55fe9934f452b",
"deprecated": false,
"id": "CVE-2023-52441-d47b0b5f",
"target": {
"file": "fs/smb/server/server.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"173352020502345719275340724949288210433",
"280152463001151705998741686463664270931",
"337949439912508131290275700067888545828",
"200619879318667584615608008312590517664",
"72385190931596526652108879029666590024",
"123126215961323645447620909806764606336",
"115847744212080013139259942853543222786",
"158046079938230438873292913319652856441"
]
},
"signature_type": "Line"
},
{
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5c0df9d30c289d6b9d7d44e2a450de2f8e3cf40b",
"deprecated": false,
"id": "CVE-2023-52441-dba4a75d",
"target": {
"function": "init_smb1_server",
"file": "fs/ksmbd/smb_common.c"
},
"digest": {
"function_hash": "297770837669402694348054178242000054193",
"length": 165.0
},
"signature_type": "Function"
}
]