A flaw was found in the Linux kernel's ksmbd, a high-performance in-kernel SMB server. The specific flaw exists within the handling of SMB2_SESSION_SETUP commands. The issue results from the lack of control of resource consumption. An attacker can leverage this vulnerability to create a denial-of-service condition on the system.

An update of the linux package has been released.

The remote Ubuntu 20.04 LTS / 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6704-4 advisory.

    It was discovered that the NVIDIA Tegra XUSB pad controller driver in the Linux kernel did not properly     handle return values in certain error conditions. A local attacker could use this to cause a denial of     service (system crash). (CVE-2023-23000)

    Quentin Minster discovered that the KSMBD implementation in the Linux kernel did not properly handle     session setup requests. A remote attacker could possibly use this to cause a denial of service (memory     exhaustion). (CVE-2023-32247)

    Lonial Con discovered that the netfilter subsystem in the Linux kernel did not properly handle element     deactivation in certain cases, leading to a use-after-free vulnerability. A local attacker could use this     to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2024-1085)

    Notselwyn discovered that the netfilter subsystem in the Linux kernel did not properly handle verdict     parameters in certain cases, leading to a use- after-free vulnerability. A local attacker could use this     to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2024-1086)

    It was discovered that a race condition existed in the SCSI Emulex LightPulse Fibre Channel driver in the     Linux kernel when unregistering FCF and re-scanning an HBA FCF table, leading to a null pointer     dereference vulnerability. A local attacker could use this to cause a denial of service (system crash).
    (CVE-2024-24855)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 20.04 LTS / 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6704-3 advisory.

    It was discovered that the NVIDIA Tegra XUSB pad controller driver in the Linux kernel did not properly     handle return values in certain error conditions. A local attacker could use this to cause a denial of     service (system crash). (CVE-2023-23000)

    Quentin Minster discovered that the KSMBD implementation in the Linux kernel did not properly handle     session setup requests. A remote attacker could possibly use this to cause a denial of service (memory     exhaustion). (CVE-2023-32247)

    Lonial Con discovered that the netfilter subsystem in the Linux kernel did not properly handle element     deactivation in certain cases, leading to a use-after-free vulnerability. A local attacker could use this     to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2024-1085)

    Notselwyn discovered that the netfilter subsystem in the Linux kernel did not properly handle verdict     parameters in certain cases, leading to a use- after-free vulnerability. A local attacker could use this     to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2024-1086)

    It was discovered that a race condition existed in the SCSI Emulex LightPulse Fibre Channel driver in the     Linux kernel when unregistering FCF and re-scanning an HBA FCF table, leading to a null pointer     dereference vulnerability. A local attacker could use this to cause a denial of service (system crash).
    (CVE-2024-24855)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6704-2 advisory.

    It was discovered that the NVIDIA Tegra XUSB pad controller driver in the Linux kernel did not properly     handle return values in certain error conditions. A local attacker could use this to cause a denial of     service (system crash). (CVE-2023-23000)

    Quentin Minster discovered that the KSMBD implementation in the Linux kernel did not properly handle     session setup requests. A remote attacker could possibly use this to cause a denial of service (memory     exhaustion). (CVE-2023-32247)

    Lonial Con discovered that the netfilter subsystem in the Linux kernel did not properly handle element     deactivation in certain cases, leading to a use-after-free vulnerability. A local attacker could use this     to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2024-1085)

    Notselwyn discovered that the netfilter subsystem in the Linux kernel did not properly handle verdict     parameters in certain cases, leading to a use- after-free vulnerability. A local attacker could use this     to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2024-1086)

    It was discovered that a race condition existed in the SCSI Emulex LightPulse Fibre Channel driver in the     Linux kernel when unregistering FCF and re-scanning an HBA FCF table, leading to a null pointer     dereference vulnerability. A local attacker could use this to cause a denial of service (system crash).
    (CVE-2024-24855)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 20.04 LTS / 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6704-1 advisory.

    It was discovered that the NVIDIA Tegra XUSB pad controller driver in the Linux kernel did not properly     handle return values in certain error conditions. A local attacker could use this to cause a denial of     service (system crash). (CVE-2023-23000)

    Quentin Minster discovered that the KSMBD implementation in the Linux kernel did not properly handle     session setup requests. A remote attacker could possibly use this to cause a denial of service (memory     exhaustion). (CVE-2023-32247)

    Lonial Con discovered that the netfilter subsystem in the Linux kernel did not properly handle element     deactivation in certain cases, leading to a use-after-free vulnerability. A local attacker could use this     to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2024-1085)

    Notselwyn discovered that the netfilter subsystem in the Linux kernel did not properly handle verdict     parameters in certain cases, leading to a use- after-free vulnerability. A local attacker could use this     to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2024-1086)

    It was discovered that a race condition existed in the SCSI Emulex LightPulse Fibre Channel driver in the     Linux kernel when unregistering FCF and re-scanning an HBA FCF table, leading to a null pointer     dereference vulnerability. A local attacker could use this to cause a denial of service (system crash).
    (CVE-2024-24855)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 20.04 LTS / 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6705-1 advisory.

    It was discovered that the DesignWare USB3 for Qualcomm SoCs driver in the Linux kernel did not properly     handle certain error conditions during device registration. A local attacker could possibly use this to     cause a denial of service (system crash). (CVE-2023-22995)

    It was discovered that the NVIDIA Tegra XUSB pad controller driver in the Linux kernel did not properly     handle return values in certain error conditions. A local attacker could use this to cause a denial of     service (system crash). (CVE-2023-23000)

    Quentin Minster discovered that the KSMBD implementation in the Linux kernel did not properly handle     session setup requests. A remote attacker could possibly use this to cause a denial of service (memory     exhaustion). (CVE-2023-32247)

    It was discovered that a race condition existed in the Cypress touchscreen driver in the Linux kernel     during device removal, leading to a use-after- free vulnerability. A physically proximate attacker could     use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2023-4134)

     discovered that the NFC Controller Interface (NCI) implementation in the Linux kernel did not     properly handle certain memory allocation failure conditions, leading to a null pointer dereference     vulnerability. A local attacker could use this to cause a denial of service (system crash).
    (CVE-2023-46343)

    It was discovered that the io_uring subsystem in the Linux kernel contained a race condition, leading to a     null pointer dereference vulnerability. A local attacker could use this to cause a denial of service     (system crash). (CVE-2023-46862)

    It was discovered that a race condition existed in the Bluetooth subsystem of the Linux kernel, leading to     a use-after-free vulnerability. A local attacker could use this to cause a denial of service (system     crash) or possibly execute arbitrary code. (CVE-2023-51779)

    It was discovered that a race condition existed in the Rose X.25 protocol implementation in the Linux     kernel, leading to a use-after- free vulnerability. A local attacker could use this to cause a denial of     service (system crash) or possibly execute arbitrary code. (CVE-2023-51782)

    Alon Zahavi discovered that the NVMe-oF/TCP subsystem of the Linux kernel did not properly handle connect     command payloads in certain situations, leading to an out-of-bounds read vulnerability. A remote attacker     could use this to expose sensitive information (kernel memory). (CVE-2023-6121)

    It was discovered that the VirtIO subsystem in the Linux kernel did not properly initialize memory in some     situations. A local attacker could use this to possibly expose sensitive information (kernel memory).
    (CVE-2024-0340)

    Dan Carpenter discovered that the netfilter subsystem in the Linux kernel did not store data in properly     sized memory locations. A local user could use this to cause a denial of service (system crash).
    (CVE-2024-0607)

    Lonial Con discovered that the netfilter subsystem in the Linux kernel did not properly handle element     deactivation in certain cases, leading to a use-after-free vulnerability. A local attacker could use this     to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2024-1085)

    Notselwyn discovered that the netfilter subsystem in the Linux kernel did not properly handle verdict     parameters in certain cases, leading to a use- after-free vulnerability. A local attacker could use this     to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2024-1086)

    It was discovered that a race condition existed in the SCSI Emulex LightPulse Fibre Channel driver in the     Linux kernel when unregistering FCF and re-scanning an HBA FCF table, leading to a null pointer     dereference vulnerability. A local attacker could use this to cause a denial of service (system crash).
    (CVE-2024-24855)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 22.04 LTS / 23.04 host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6338-2 advisory.

    Zi Fan Tan discovered that the binder IPC implementation in the Linux kernel contained a use-after-free     vulnerability. A local attacker could use this to cause a denial of service (system crash) or possibly     execute arbitrary code. (CVE-2023-21255)

    It was discovered that a race condition existed in the f2fs file system in the Linux kernel, leading to a     null pointer dereference vulnerability. An attacker could use this to construct a malicious f2fs image     that, when mounted and operated on, could cause a denial of service (system crash). (CVE-2023-2898)

    It was discovered that the DVB Core driver in the Linux kernel did not properly handle locking events in     certain situations. A local attacker could use this to cause a denial of service (kernel deadlock).
    (CVE-2023-31084)

    Quentin Minster discovered that the KSMBD implementation in the Linux kernel did not properly handle     session setup requests. A remote attacker could possibly use this to cause a denial of service (memory     exhaustion). (CVE-2023-32247)

    Quentin Minster discovered that a race condition existed in the KSMBD implementation in the Linux kernel     when handling sessions operations. A remote attacker could use this to cause a denial of service (system     crash) or possibly execute arbitrary code. (CVE-2023-32250, CVE-2023-32252, CVE-2023-32257)

    It was discovered that a race condition existed in the KSMBD implementation in the Linux kernel when     handling session connections, leading to a use- after-free vulnerability. A remote attacker could use this     to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2023-32258)

    It was discovered that the KSMBD implementation in the Linux kernel did not properly validate buffer sizes     in certain operations, leading to an out-of- bounds read vulnerability. A remote attacker could use this     to cause a denial of service (system crash) or possibly expose sensitive information. (CVE-2023-38426,     CVE-2023-38428)

    It was discovered that the KSMBD implementation in the Linux kernel did not properly calculate the size of     certain buffers. A remote attacker could use this to cause a denial of service (system crash) or possibly     execute arbitrary code. (CVE-2023-38429)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 23.04 host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6344-1 advisory.

    Zi Fan Tan discovered that the binder IPC implementation in the Linux kernel contained a use-after-free     vulnerability. A local attacker could use this to cause a denial of service (system crash) or possibly     execute arbitrary code. (CVE-2023-21255)

    It was discovered that a race condition existed in the f2fs file system in the Linux kernel, leading to a     null pointer dereference vulnerability. An attacker could use this to construct a malicious f2fs image     that, when mounted and operated on, could cause a denial of service (system crash). (CVE-2023-2898)

    It was discovered that the DVB Core driver in the Linux kernel did not properly handle locking events in     certain situations. A local attacker could use this to cause a denial of service (kernel deadlock).
    (CVE-2023-31084)

    Quentin Minster discovered that the KSMBD implementation in the Linux kernel did not properly handle     session setup requests. A remote attacker could possibly use this to cause a denial of service (memory     exhaustion). (CVE-2023-32247)

    Quentin Minster discovered that a race condition existed in the KSMBD implementation in the Linux kernel     when handling sessions operations. A remote attacker could use this to cause a denial of service (system     crash) or possibly execute arbitrary code. (CVE-2023-32250, CVE-2023-32252, CVE-2023-32257)

    It was discovered that a race condition existed in the KSMBD implementation in the Linux kernel when     handling session connections, leading to a use- after-free vulnerability. A remote attacker could use this     to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2023-32258)

    It was discovered that the KSMBD implementation in the Linux kernel did not properly validate buffer sizes     in certain operations, leading to an out-of- bounds read vulnerability. A remote attacker could use this     to cause a denial of service (system crash) or possibly expose sensitive information. (CVE-2023-38426,     CVE-2023-38428)

    It was discovered that the KSMBD implementation in the Linux kernel did not properly calculate the size of     certain buffers. A remote attacker could use this to cause a denial of service (system crash) or possibly     execute arbitrary code. (CVE-2023-38429)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 22.04 LTS / 23.04 host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6338-1 advisory.

    Zi Fan Tan discovered that the binder IPC implementation in the Linux kernel contained a use-after-free     vulnerability. A local attacker could use this to cause a denial of service (system crash) or possibly     execute arbitrary code. (CVE-2023-21255)

    It was discovered that a race condition existed in the f2fs file system in the Linux kernel, leading to a     null pointer dereference vulnerability. An attacker could use this to construct a malicious f2fs image     that, when mounted and operated on, could cause a denial of service (system crash). (CVE-2023-2898)

    It was discovered that the DVB Core driver in the Linux kernel did not properly handle locking events in     certain situations. A local attacker could use this to cause a denial of service (kernel deadlock).
    (CVE-2023-31084)

    Quentin Minster discovered that the KSMBD implementation in the Linux kernel did not properly handle     session setup requests. A remote attacker could possibly use this to cause a denial of service (memory     exhaustion). (CVE-2023-32247)

    Quentin Minster discovered that a race condition existed in the KSMBD implementation in the Linux kernel     when handling sessions operations. A remote attacker could use this to cause a denial of service (system     crash) or possibly execute arbitrary code. (CVE-2023-32250, CVE-2023-32252, CVE-2023-32257)

    It was discovered that a race condition existed in the KSMBD implementation in the Linux kernel when     handling session connections, leading to a use- after-free vulnerability. A remote attacker could use this     to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2023-32258)

    It was discovered that the KSMBD implementation in the Linux kernel did not properly validate buffer sizes     in certain operations, leading to an out-of- bounds read vulnerability. A remote attacker could use this     to cause a denial of service (system crash) or possibly expose sensitive information. (CVE-2023-38426,     CVE-2023-38428)

    It was discovered that the KSMBD implementation in the Linux kernel did not properly calculate the size of     certain buffers. A remote attacker could use this to cause a denial of service (system crash) or possibly     execute arbitrary code. (CVE-2023-38429)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
204441	Photon OS 5.0: Linux PHSA-2024-5.0-0187	Nessus	PhotonOS Local Security Checks	high
192683	Ubuntu 20.04 LTS / 22.04 LTS : Linux kernel (Intel IoTG) vulnerabilities (USN-6704-4)	Nessus	Ubuntu Local Security Checks	high
192564	Ubuntu 20.04 LTS / 22.04 LTS : Linux kernel (Oracle) vulnerabilities (USN-6704-3)	Nessus	Ubuntu Local Security Checks	high
192398	Ubuntu 22.04 LTS : Linux kernel (Raspberry Pi) vulnerabilities (USN-6704-2)	Nessus	Ubuntu Local Security Checks	high
192312	Ubuntu 20.04 LTS / 22.04 LTS : Linux kernel vulnerabilities (USN-6704-1)	Nessus	Ubuntu Local Security Checks	high
192311	Ubuntu 20.04 LTS / 22.04 LTS : Linux kernel (AWS) vulnerabilities (USN-6705-1)	Nessus	Ubuntu Local Security Checks	high
181189	Ubuntu 22.04 LTS / 23.04 : Linux kernel vulnerabilities (USN-6338-2)	Nessus	Ubuntu Local Security Checks	critical
180558	Ubuntu 23.04 : Linux kernel (Azure) vulnerabilities (USN-6344-1)	Nessus	Ubuntu Local Security Checks	critical
180511	Ubuntu 22.04 LTS / 23.04 : Linux kernel vulnerabilities (USN-6338-1)	Nessus	Ubuntu Local Security Checks	critical

Detections

Analytics

CVE-2023-32247

high

Tenable Plugins

high

high

high

high

high

high

critical

critical

critical