CVE-2023-32256

HighCVSS 7.5/10Last modified Nov 6, 2026

Description

A flaw was found in the Linux kernel's ksmbd component. A race condition between smb2 close operation and logoff in multichannel connections could result in a use-after-free issue.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:N/A:H

Weakness enumeration

CWE-421

Affected software

Vendor	Product	Versions
—	—	< 5.15.145; >= 6.0.0, < 6.0.*; >= 6.1.0, < 6.1.29; >= 6.2.0, < 6.2.16; >= 6.3.0, < 6.3.2
Red Hat	Red Hat Enterprise Linux 10	—
Red Hat	Red Hat Enterprise Linux 6	—
Red Hat	Red Hat Enterprise Linux 7	—
Red Hat	Red Hat Enterprise Linux 7	—
Red Hat	Red Hat Enterprise Linux 8	—
Red Hat	Red Hat Enterprise Linux 8	—
Red Hat	Red Hat Enterprise Linux 9	—
Red Hat	Red Hat Enterprise Linux 9	—

References

Timeline

Published: Aug 1, 2025
Last modified: Nov 6, 2026
NVD status: Deferred

Related CVEs from 2023

CVE-2023-322578.1A flaw was found in the Linux kernel's ksmbd, a high-performance in-kernel SMB server. The specific flaw exists within the processing of SMB CVE-2023-322588.1A flaw was found in the Linux kernel's ksmbd, a high-performance in-kernel SMB server. The specific flaw exists within the processing of SMB CVE-2023-322596.5Insufficient Granularity of Access Control vulnerability in OpenText™ Service Management Automation X (SMAX), OpenText™ Asset Management X (CVE-2023-32264.8The Popup Builder WordPress plugin before 4.2.0 does not sanitise and escape some of its settings, which could allow high privilege users su CVE-2023-322606.5Misinterpretation of Input vulnerability in OpenText™ Service Management Automation X (SMAX), OpenText™ Asset Management X (AMX), and OpenTe CVE-2023-322616.5A potential vulnerability has been identified in the Micro Focus Dimensions CM Plugin for Jenkins. The vulnerability allows attackers with O CVE-2023-322626.5A potential vulnerability has been identified in the Micro Focus Dimensions CM Plugin for Jenkins. The vulnerability allows attackers with I CVE-2023-322635.7A potential vulnerability has been identified in the Micro Focus Dimensions CM Plugin for Jenkins. The vulnerability could be exploited to r CVE-2023-322645.8CWE-1385 vulnerability in OpenText Documentum D2 affecting versions16.5.1 to CE 23.2. The vulnerability could allow upload arbitrary code an CVE-2023-322656.5A potential security vulnerability has been identified in the Enterprise Server Common Web Administration (ESCWA) component used in Enterpri CVE-2023-322665.3Untrusted Search Path vulnerability in OpenText™ Application Lifecycle Management (ALM),Quality Center allows Code Inclusion. The vulnerabil CVE-2023-322678.8A potential vulnerability has been identified in OpenText / Micro Focus ArcSight Management Center. The vulnerability could be remotely expl