CVE-2023-52434

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An out-of-bounds read issue exists in the SMB client of the Linux kernel within the smb2 parse contexts() function located in the fs/smb/client/smb2pdu.c module. The problem occurs when the system fails to properly validate offsets and lengths before dereferencing create contexts received from a server. A remote attacker could exploit this to gain access to protected information or cause a denial of service.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.