Linux Kernel Vulnerability Affecting ksmbd by Performance Engineering

CVE-2023-3866

What is CVE-2023-3866?

A vulnerability exists in the ksmbd component of the Linux kernel that can lead to NULL pointer dereferencing due to inadequate validation of session and tree IDs in compound requests. Specifically, when the first operation in a compound request is an SMB2 ECHO request, ksmbd allows the bypassing of essential validations. This flaw can result in work->sess and work->tcon being NULL. Subsequent requests that attempt to access these NULL pointers may cause critical errors, potentially leading to system instability or data breaches.

References