CVE-2023-38428

CriticalCVSS 9.1/10Last modified Jun 17, 2026

Description

An issue was discovered in the Linux kernel before 6.3.4. fs/ksmbd/smb2pdu.c in ksmbd does not properly check the UserName value because it does not consider the address of security buffer, leading to an out-of-bounds read.

Metrics

CVSS 3.1 9.1/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

Weakness enumeration

CWE-125

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

https://cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.3.4Release Notes
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/fs/ksmbd?id=f0a96d1aafd8964e1f9955c830a3e5cb3c60a90fPatch
https://security.netapp.com/advisory/ntap-20230831-0001/Third Party Advisory, VDB Entry
https://cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.3.4Release Notes
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/fs/ksmbd?id=f0a96d1aafd8964e1f9955c830a3e5cb3c60a90fPatch
https://security.netapp.com/advisory/ntap-20230831-0001/Third Party Advisory, VDB Entry

Timeline

Published: Jul 18, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-384299.8An issue was discovered in the Linux kernel before 6.3.4. fs/ksmbd/connection.c in ksmbd has an off-by-one error in memory allocation (becau CVE-2023-38436.1A vulnerability was found in mooSocial mooDating 1.2. It has been classified as problematic. Affected is an unknown function of the file /ma CVE-2023-384309.1An issue was discovered in the Linux kernel before 6.3.9. ksmbd does not validate the SMB request protocol ID, leading to an out-of-bounds r CVE-2023-384319.1An issue was discovered in the Linux kernel before 6.3.8. fs/smb/server/connection.c in ksmbd does not validate the relationship between the CVE-2023-384329.1An issue was discovered in the Linux kernel before 6.3.10. fs/smb/server/smb2misc.c in ksmbd does not validate the relationship between the CVE-2023-384337.5Fujitsu Real-time Video Transmission Gear "IP series" use hard-coded credentials, which may allow a remote unauthenticated attacker to initi CVE-2023-384347.5xHTTP 72f812d has a double free in close_connection in xhttp.c via a malformed HTTP request method.CVE-2023-384356.1An improper neutralization of input during web page generation ('Cross-site Scripting') [CWE-79] vulnerability in Apache Felix Healthcheck W CVE-2023-384365.5In vowifiservice, there is a possible missing permission check.This could lead to local information disclosure with no additional execution CVE-2023-384375.5In vowifiservice, there is a possible missing permission check.This could lead to local information disclosure with no additional execution CVE-2023-384385.5In vowifiservice, there is a possible missing permission check.This could lead to local information disclosure with no additional execution CVE-2023-384395.5In vowifiservice, there is a possible missing permission check.This could lead to local information disclosure with no additional execution