Linux Kernel Vulnerability in ksmbd Affects File System Information Retrieval

CVE-2023-53399

What is CVE-2023-53399?

A vulnerability in the Linux Kernel's ksmbd component has been identified, which involves a NULL pointer dereference during file system information retrieval in the smb2_get_info_filesystem function. Specifically, if the share's path is NULL, it triggers a dereference issue, potentially leading to system instability or crashes. This flaw necessitates that users upgrade their systems to avoid any exploitation risks.

References