CVE-2023-52751: Linux kernel - UAF in smb2_query_info_compound()
Summary
CVE-2023-52751: In the Linux kernel, the following vulnerability has been resolved: smb: client: fix use-after-free in smb2_query_info_compound() The following UAF was triggered when running fstests generic/072 with KASAN enabled agains... Affects linux versions 5.10.103-1 – 6.9.9-1. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The linux-libc-dev package is a development package that provides the C library headers for the Linux kernel. It is used to compile and build applications that interact with the kernel. The package is an essential component for software development on Linux systems. However, the linux-libc-dev package is vulnerable to a use-after-free (UAF) vulnerability in the smb2_query_info_compound() function of the CIFS (Common Internet File System) module in the Linux kernel.
Vulnerability Detail
The UAF vulnerability in smb2_query_info_compound() can be triggered when running certain tests with KASAN (Kernel Address Sanitizer) enabled against Windows Server 2022 and specific mount options. This vulnerability can lead to a slab-use-after-free bug, causing a read of size 8 at a specific memory address. An attacker could potentially exploit this vulnerability to execute arbitrary code or cause a denial-of-service (DoS) condition.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability. However, users can mitigate the risk by ensuring that their systems are up to date with the latest security patches and following secure kernel configuration practices.
Conclusion
The linux-libc-dev package is vulnerable to a use-after-free vulnerability in the smb2_query_info_compound() function of the CIFS module in the Linux kernel. This vulnerability can be exploited to execute arbitrary code or cause a denial-of-service condition. It is crucial to update the linux-libc-dev package to a patched version and follow secure kernel configuration practices. For further assistance and support in vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for linux →
FAQ
The linux-libc-dev package provides the C library headers for the Linux kernel, allowing developers to compile and build applications that interact with the kernel.
The smb2_query_info_compound() function is part of the CIFS module in the Linux kernel and is responsible for handling compound queries to retrieve information from SMB (Server Message Block) servers.
This vulnerability can be exploited by an attacker who can trigger the use-after-free bug in the smb2_query_info_compound() function. By exploiting this vulnerability, an attacker could potentially execute arbitrary code or cause a denial-of-service condition.
Yes, the Linux kernel developers have released patches to address this vulnerability. It is recommended to update the linux-libc-dev package to a version that includes the patch for CVE-2023-52751.
There is no information available about known instances of this vulnerability being actively exploited in the wild. However, it is important to apply the necessary security updates to mitigate the risk.
Related vulnerabilities
Recent vulnerabilities recorded for linux.
