critical
CVE-2023-38430
An issue was discovered in the Linux kernel before 6.3.9. ksmbd does n ...
In the Trivy database since at least 24 Oct 2026, 07:11 UTCWhen it arrived before that build is not recorded.
Severity by source
NVD9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
Trivy's own label is CRITICAL. Rated critical by NVD, CBL-Mariner, Photon OS. Rated lower by Ubuntu (high).
Description
An issue was discovered in the Linux kernel before 6.3.9. ksmbd does not validate the SMB request protocol ID, leading to an out-of-bounds read.
Affected packages and fixed versions
| Source | Package | Fixed in |
|---|---|---|
| CBL-Mariner 1.0 | kernel | 0:5.10.188.1-1.cm1 |
| CBL-Mariner 2.0 | kernel | 0:5.15.122.1-2.cm2 |
| Photon OS 5.0 | bpftool, linux, linux-devel and 5 more | 6.1.37-1.ph5 |
| debian 12 | linux | 6.1.37-1 |
| debian 13 | linux | 6.3.11-1 |
| debian 14 | linux | 6.3.11-1 |
| echo | linux | 6.1.37-1 |
| root.io debian 12 | rootio-linux | 6.1.37-1 |
| root.io debian 13 | rootio-linux | 6.3.11-1 |
| root.io ubuntu 22.04 | rootio-linux | 5.15.0-102.112 |
| ubuntu 20.04 | linux-aws-5.15, linux-azure-5.15, linux-gcp-5.15 and 8 more | 5.15.0-1057.63~20.04.1 and 9 more |
| ubuntu 20.04-ESM | linux-aws-5.15, linux-azure-5.15, linux-gcp-5.15 and 8 more | 5.15.0-1057.63~20.04.1 and 9 more |
Show all 76 entries from 14 sources
| Source | Package | Fixed in |
|---|---|---|
| CBL-Mariner 1.0 | kernel | 0:5.10.188.1-1.cm1 |
| CBL-Mariner 2.0 | kernel | 0:5.15.122.1-2.cm2 |
| Photon OS 5.0 | bpftool | 6.1.37-1.ph5 |
| Photon OS 5.0 | linux | 6.1.37-1.ph5 |
| Photon OS 5.0 | linux-devel | 6.1.37-1.ph5 |
| Photon OS 5.0 | linux-docs | 6.1.37-1.ph5 |
| Photon OS 5.0 | linux-drivers-gpu | 6.1.37-1.ph5 |
| Photon OS 5.0 | linux-drivers-sound | 6.1.37-1.ph5 |
| Photon OS 5.0 | linux-python3-perf | 6.1.37-1.ph5 |
| Photon OS 5.0 | linux-tools | 6.1.37-1.ph5 |
| debian 12 | linux | 6.1.37-1 |
| debian 13 | linux | 6.3.11-1 |
| debian 14 | linux | 6.3.11-1 |
| echo | linux | 6.1.37-1 |
| root.io debian 12 | rootio-linux | 6.1.37-1 |
| root.io debian 13 | rootio-linux | 6.3.11-1 |
| root.io ubuntu 22.04 | rootio-linux | 5.15.0-102.112 |
| ubuntu 20.04 | linux-aws-5.15 | 5.15.0-1057.63~20.04.1 |
| ubuntu 20.04 | linux-azure-5.15 | 5.15.0-1060.69~20.04.1 |
| ubuntu 20.04 | linux-gcp-5.15 | 5.15.0-1055.63~20.04.1 |
| ubuntu 20.04 | linux-gkeop-5.15 | 5.15.0-1040.46~20.04.1 |
| ubuntu 20.04 | linux-hwe-5.15 | 5.15.0-102.112~20.04.1 |
| ubuntu 20.04 | linux-ibm-5.15 | 5.15.0-1050.53~20.04.1 |
| ubuntu 20.04 | linux-intel-iotg-5.15 | 5.15.0-1052.58~20.04.1 |
| ubuntu 20.04 | linux-lowlatency-hwe-5.15 | 5.15.0-102.112~20.04.1 |
| ubuntu 20.04 | linux-nvidia-tegra-5.15 | 5.15.0-1025.25~20.04.1 |
| ubuntu 20.04 | linux-oracle-5.15 | 5.15.0-1055.61~20.04.1 |
| ubuntu 20.04 | linux-riscv-5.15 | 5.15.0-1053.57~20.04.1 |
| ubuntu 20.04-ESM | linux-aws-5.15 | 5.15.0-1057.63~20.04.1 |
| ubuntu 20.04-ESM | linux-azure-5.15 | 5.15.0-1060.69~20.04.1 |
| ubuntu 20.04-ESM | linux-gcp-5.15 | 5.15.0-1055.63~20.04.1 |
| ubuntu 20.04-ESM | linux-gkeop-5.15 | 5.15.0-1040.46~20.04.1 |
| ubuntu 20.04-ESM | linux-hwe-5.15 | 5.15.0-102.112~20.04.1 |
| ubuntu 20.04-ESM | linux-ibm-5.15 | 5.15.0-1050.53~20.04.1 |
| ubuntu 20.04-ESM | linux-intel-iotg-5.15 | 5.15.0-1052.58~20.04.1 |
| ubuntu 20.04-ESM | linux-lowlatency-hwe-5.15 | 5.15.0-102.112~20.04.1 |
| ubuntu 20.04-ESM | linux-nvidia-tegra-5.15 | 5.15.0-1025.25~20.04.1 |
| ubuntu 20.04-ESM | linux-oracle-5.15 | 5.15.0-1055.61~20.04.1 |
| ubuntu 20.04-ESM | linux-riscv-5.15 | 5.15.0-1053.57~20.04.1 |
| ubuntu 22.04 | linux | 5.15.0-102.112 |
| ubuntu 22.04 | linux-aws | 5.15.0-1057.63 |
| ubuntu 22.04 | linux-aws-6.2 | 6.2.0-1015.15~22.04.1 |
| ubuntu 22.04 | linux-azure | 5.15.0-1060.69 |
| ubuntu 22.04 | linux-azure-6.2 | 6.2.0-1016.16~22.04.1 |
| ubuntu 22.04 | linux-azure-fde | 5.15.0-1060.69.1 |
| ubuntu 22.04 | linux-azure-fde-6.2 | 6.2.0-1016.16~22.04.1.1 |
| ubuntu 22.04 | linux-gcp | 5.15.0-1055.63 |
| ubuntu 22.04 | linux-gcp-6.2 | 6.2.0-1018.20~22.04.1 |
| ubuntu 22.04 | linux-gke | 5.15.0-1054.59 |
| ubuntu 22.04 | linux-gkeop | 5.15.0-1040.46 |
| ubuntu 22.04 | linux-hwe-6.2 | 6.2.0-36.37~22.04.1 |
| ubuntu 22.04 | linux-ibm | 5.15.0-1050.53 |
| ubuntu 22.04 | linux-intel-iot-realtime | 5.15.0-1050.52 |
| ubuntu 22.04 | linux-intel-iotg | 5.15.0-1052.58 |
| ubuntu 22.04 | linux-kvm | 5.15.0-1054.59 |
| ubuntu 22.04 | linux-lowlatency | 5.15.0-102.112 |
| ubuntu 22.04 | linux-lowlatency-hwe-6.2 | 6.2.0-1016.16~22.04.1 |
| ubuntu 22.04 | linux-nvidia | 5.15.0-1048.48 |
| ubuntu 22.04 | linux-nvidia-6.2 | 6.2.0-1011.11 |
| ubuntu 22.04 | linux-nvidia-tegra | 5.15.0-1025.25 |
| ubuntu 22.04 | linux-nvidia-tegra-igx | 5.15.0-1012.12 |
| ubuntu 22.04 | linux-oem-6.1 | 6.1.0-1019.19 |
| ubuntu 22.04 | linux-oracle | 5.15.0-1055.61 |
| ubuntu 22.04 | linux-raspi | 5.15.0-1050.53 |
| ubuntu 22.04 | linux-starfive-6.2 | 6.2.0-1009.10~22.04.1 |
| ubuntu 22.04 | linux-xilinx-zynqmp | 5.15.0-1030.34 |
| ubuntu 23.04 | linux | 6.2.0-36.37 |
| ubuntu 23.04 | linux-aws | 6.2.0-1015.15 |
| ubuntu 23.04 | linux-azure | 6.2.0-1016.16 |
| ubuntu 23.04 | linux-gcp | 6.2.0-1018.20 |
| ubuntu 23.04 | linux-kvm | 6.2.0-1016.16 |
| ubuntu 23.04 | linux-lowlatency | 6.2.0-1016.16 |
| ubuntu 23.04 | linux-oracle | 6.2.0-1015.15 |
| ubuntu 23.04 | linux-raspi | 6.2.0-1016.18 |
| ubuntu 23.04 | linux-riscv | 6.2.0-36.37.1 |
| ubuntu 23.04 | linux-starfive | 6.2.0-1008.9 |
References
- https://cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.3.9
- https://git.kernel.org/linus/1c1bcf2d3ea061613119b534f57507c377df20f9%20%286.4-rc6%29
- https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/fs/smb/server?id=1c1bcf2d3ea061613119b534f57507c377df20f9
- https://nvd.nist.gov/vuln/detail/CVE-2023-38430
- https://security.netapp.com/advisory/ntap-20230831-0003/
- https://ubuntu.com/security/notices/USN-6285-1
- https://ubuntu.com/security/notices/USN-6464-1
- https://ubuntu.com/security/notices/USN-6466-1