critique
CVE-2023-38430
An issue was discovered in the Linux kernel before 6.3.9. ksmbd does n ...
Dans la Trivy database depuis au moins le 24 oct. 2026, 07:11 UTCLa date d'entrée avant ce build n'est pas enregistrée.
Sévérité par source
NVD9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
Le label propre à Trivy est CRITICAL. Critique selon NVD, CBL-Mariner, Photon OS. Plus basse selon Ubuntu (élevée).
Description
An issue was discovered in the Linux kernel before 6.3.9. ksmbd does not validate the SMB request protocol ID, leading to an out-of-bounds read.
Paquets affectés et versions corrigées
| Source | Paquet | Corrigé en |
|---|---|---|
| CBL-Mariner 1.0 | kernel | 0:5.10.188.1-1.cm1 |
| CBL-Mariner 2.0 | kernel | 0:5.15.122.1-2.cm2 |
| Photon OS 5.0 | bpftool, linux, linux-devel et 5 autres | 6.1.37-1.ph5 |
| debian 12 | linux | 6.1.37-1 |
| debian 13 | linux | 6.3.11-1 |
| debian 14 | linux | 6.3.11-1 |
| echo | linux | 6.1.37-1 |
| root.io debian 12 | rootio-linux | 6.1.37-1 |
| root.io debian 13 | rootio-linux | 6.3.11-1 |
| root.io ubuntu 22.04 | rootio-linux | 5.15.0-102.112 |
| ubuntu 20.04 | linux-aws-5.15, linux-azure-5.15, linux-gcp-5.15 et 8 autres | 5.15.0-1057.63~20.04.1 et 9 autres |
| ubuntu 20.04-ESM | linux-aws-5.15, linux-azure-5.15, linux-gcp-5.15 et 8 autres | 5.15.0-1057.63~20.04.1 et 9 autres |
Afficher les 76 entrées de 14 sources
| Source | Paquet | Corrigé en |
|---|---|---|
| CBL-Mariner 1.0 | kernel | 0:5.10.188.1-1.cm1 |
| CBL-Mariner 2.0 | kernel | 0:5.15.122.1-2.cm2 |
| Photon OS 5.0 | bpftool | 6.1.37-1.ph5 |
| Photon OS 5.0 | linux | 6.1.37-1.ph5 |
| Photon OS 5.0 | linux-devel | 6.1.37-1.ph5 |
| Photon OS 5.0 | linux-docs | 6.1.37-1.ph5 |
| Photon OS 5.0 | linux-drivers-gpu | 6.1.37-1.ph5 |
| Photon OS 5.0 | linux-drivers-sound | 6.1.37-1.ph5 |
| Photon OS 5.0 | linux-python3-perf | 6.1.37-1.ph5 |
| Photon OS 5.0 | linux-tools | 6.1.37-1.ph5 |
| debian 12 | linux | 6.1.37-1 |
| debian 13 | linux | 6.3.11-1 |
| debian 14 | linux | 6.3.11-1 |
| echo | linux | 6.1.37-1 |
| root.io debian 12 | rootio-linux | 6.1.37-1 |
| root.io debian 13 | rootio-linux | 6.3.11-1 |
| root.io ubuntu 22.04 | rootio-linux | 5.15.0-102.112 |
| ubuntu 20.04 | linux-aws-5.15 | 5.15.0-1057.63~20.04.1 |
| ubuntu 20.04 | linux-azure-5.15 | 5.15.0-1060.69~20.04.1 |
| ubuntu 20.04 | linux-gcp-5.15 | 5.15.0-1055.63~20.04.1 |
| ubuntu 20.04 | linux-gkeop-5.15 | 5.15.0-1040.46~20.04.1 |
| ubuntu 20.04 | linux-hwe-5.15 | 5.15.0-102.112~20.04.1 |
| ubuntu 20.04 | linux-ibm-5.15 | 5.15.0-1050.53~20.04.1 |
| ubuntu 20.04 | linux-intel-iotg-5.15 | 5.15.0-1052.58~20.04.1 |
| ubuntu 20.04 | linux-lowlatency-hwe-5.15 | 5.15.0-102.112~20.04.1 |
| ubuntu 20.04 | linux-nvidia-tegra-5.15 | 5.15.0-1025.25~20.04.1 |
| ubuntu 20.04 | linux-oracle-5.15 | 5.15.0-1055.61~20.04.1 |
| ubuntu 20.04 | linux-riscv-5.15 | 5.15.0-1053.57~20.04.1 |
| ubuntu 20.04-ESM | linux-aws-5.15 | 5.15.0-1057.63~20.04.1 |
| ubuntu 20.04-ESM | linux-azure-5.15 | 5.15.0-1060.69~20.04.1 |
| ubuntu 20.04-ESM | linux-gcp-5.15 | 5.15.0-1055.63~20.04.1 |
| ubuntu 20.04-ESM | linux-gkeop-5.15 | 5.15.0-1040.46~20.04.1 |
| ubuntu 20.04-ESM | linux-hwe-5.15 | 5.15.0-102.112~20.04.1 |
| ubuntu 20.04-ESM | linux-ibm-5.15 | 5.15.0-1050.53~20.04.1 |
| ubuntu 20.04-ESM | linux-intel-iotg-5.15 | 5.15.0-1052.58~20.04.1 |
| ubuntu 20.04-ESM | linux-lowlatency-hwe-5.15 | 5.15.0-102.112~20.04.1 |
| ubuntu 20.04-ESM | linux-nvidia-tegra-5.15 | 5.15.0-1025.25~20.04.1 |
| ubuntu 20.04-ESM | linux-oracle-5.15 | 5.15.0-1055.61~20.04.1 |
| ubuntu 20.04-ESM | linux-riscv-5.15 | 5.15.0-1053.57~20.04.1 |
| ubuntu 22.04 | linux | 5.15.0-102.112 |
| ubuntu 22.04 | linux-aws | 5.15.0-1057.63 |
| ubuntu 22.04 | linux-aws-6.2 | 6.2.0-1015.15~22.04.1 |
| ubuntu 22.04 | linux-azure | 5.15.0-1060.69 |
| ubuntu 22.04 | linux-azure-6.2 | 6.2.0-1016.16~22.04.1 |
| ubuntu 22.04 | linux-azure-fde | 5.15.0-1060.69.1 |
| ubuntu 22.04 | linux-azure-fde-6.2 | 6.2.0-1016.16~22.04.1.1 |
| ubuntu 22.04 | linux-gcp | 5.15.0-1055.63 |
| ubuntu 22.04 | linux-gcp-6.2 | 6.2.0-1018.20~22.04.1 |
| ubuntu 22.04 | linux-gke | 5.15.0-1054.59 |
| ubuntu 22.04 | linux-gkeop | 5.15.0-1040.46 |
| ubuntu 22.04 | linux-hwe-6.2 | 6.2.0-36.37~22.04.1 |
| ubuntu 22.04 | linux-ibm | 5.15.0-1050.53 |
| ubuntu 22.04 | linux-intel-iot-realtime | 5.15.0-1050.52 |
| ubuntu 22.04 | linux-intel-iotg | 5.15.0-1052.58 |
| ubuntu 22.04 | linux-kvm | 5.15.0-1054.59 |
| ubuntu 22.04 | linux-lowlatency | 5.15.0-102.112 |
| ubuntu 22.04 | linux-lowlatency-hwe-6.2 | 6.2.0-1016.16~22.04.1 |
| ubuntu 22.04 | linux-nvidia | 5.15.0-1048.48 |
| ubuntu 22.04 | linux-nvidia-6.2 | 6.2.0-1011.11 |
| ubuntu 22.04 | linux-nvidia-tegra | 5.15.0-1025.25 |
| ubuntu 22.04 | linux-nvidia-tegra-igx | 5.15.0-1012.12 |
| ubuntu 22.04 | linux-oem-6.1 | 6.1.0-1019.19 |
| ubuntu 22.04 | linux-oracle | 5.15.0-1055.61 |
| ubuntu 22.04 | linux-raspi | 5.15.0-1050.53 |
| ubuntu 22.04 | linux-starfive-6.2 | 6.2.0-1009.10~22.04.1 |
| ubuntu 22.04 | linux-xilinx-zynqmp | 5.15.0-1030.34 |
| ubuntu 23.04 | linux | 6.2.0-36.37 |
| ubuntu 23.04 | linux-aws | 6.2.0-1015.15 |
| ubuntu 23.04 | linux-azure | 6.2.0-1016.16 |
| ubuntu 23.04 | linux-gcp | 6.2.0-1018.20 |
| ubuntu 23.04 | linux-kvm | 6.2.0-1016.16 |
| ubuntu 23.04 | linux-lowlatency | 6.2.0-1016.16 |
| ubuntu 23.04 | linux-oracle | 6.2.0-1015.15 |
| ubuntu 23.04 | linux-raspi | 6.2.0-1016.18 |
| ubuntu 23.04 | linux-riscv | 6.2.0-36.37.1 |
| ubuntu 23.04 | linux-starfive | 6.2.0-1008.9 |
Références
- https://cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.3.9
- https://git.kernel.org/linus/1c1bcf2d3ea061613119b534f57507c377df20f9%20%286.4-rc6%29
- https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/fs/smb/server?id=1c1bcf2d3ea061613119b534f57507c377df20f9
- https://nvd.nist.gov/vuln/detail/CVE-2023-38430
- https://security.netapp.com/advisory/ntap-20230831-0003/
- https://ubuntu.com/security/notices/USN-6285-1
- https://ubuntu.com/security/notices/USN-6464-1
- https://ubuntu.com/security/notices/USN-6466-1