摘要:
In the Linux kernel, the following vulnerability has been resolved:ksmbd: fix slub overflow in ksmbd_decode_ntlmssp_auth_blob()If authblob->SessionKey.Length is bigger than session keysize(CIFS_KEY_SIZE), slub overflow can happen in key exchange codes.cifs_arc4_crypt copy to session key array from SessionKey from client.
安全等级: Low
公告ID: KylinSec-SA-2024-2224
发布日期: 2024年5月27日
关联CVE: CVE-2023-52440
In the Linux kernel, the following vulnerability has been resolved:ksmbd: fix slub overflow in ksmbd_decode_ntlmssp_auth_blob()If authblob->SessionKey.Length is bigger than session keysize(CIFS_KEY_SIZE), slub overflow can happen in key exchange codes.cifs_arc4_crypt copy to session key array from SessionKey from client.
| cve名称 | 产品 | 组件 | 是否受影响 |
|---|---|---|---|
| CVE-2023-52440 | KY3.4-4A | kernel | Unaffected |
| CVE-2023-52440 | KY3.4-5A | kernel | Unaffected |
| CVE-2023-52440 | KY3.5.1 | kernel | Unaffected |
