CVSS 3.1 Score 9.1 of 10 (high)


Published Jul 18, 2023
Updated: Dec 22, 2023
CWE ID 125


CVE-2023-38432 is a critical vulnerability found in the Linux kernel before version 6.3.10. The vulnerability affects multiple products, including ksmbd and various other software components. It allows an attacker to perform an out-of-bounds read by exploiting the lack of validation between the command payload size and the RFC1002 length specification in fs/smb/server/smb2misc.c. The danger posed by this vulnerability is high, as it can lead to unauthorized access to sensitive information and compromise the confidentiality of an organization's data. To remediate this issue, organizations should update their Linux kernel to version 6.3.10 or apply the necessary patches provided by the vendor.

Leverage our Vulnerability Intelligence module to secure your systems now - get detailed insights on CVE-2024-37364. Book your demo today.


Explore Beyond the CVE Basics with Recorded Future's Vulnerability Intelligence

Note: This is just a basic overview providing quick insights into CVE-2023-38432 information. Gain full access to comprehensive CVE data, risk scores, prioritization, and mitigation data through Recorded Future's Vulnerability Intelligence:
  • Prioritize with Risk-Based Scoring
  • Explore the Extensive Vulnerability Database
  • Receive Early Alerts on Emerging CVEs
  • Focus on Critical Exploitable Vulnerabilities
  • Streamline Remediation with Integration Options