Use-after-free in parse_lease_state()

CVE-2023-1194

Summary

A flaw exists in the KSMBD implementation of the in-kernel Samba server, where an out-of-bounds memory read can occur due to inadequate validation of input data. This vulnerability allows an attacker to exploit the parse_lease_state function by sending a malformed CREATE command, resulting in unauthorized access to invalid memory. This flaw poses significant security risks for systems relying on KSMBD for CIFS functionality, and immediate attention to patching and mitigation is advised.

References