CRITICAL 9.8 Microsoft

CVE-2023-38429

An issue was discovered in the Linux kernel before 6.3.4. fs/ksmbd/connection.c in ksmbd has an off-by-one error in memory allocation (because of ksmbd_smb2_check_message) that may lead to out-of-bounds access.

Microsoft Security Update 2023-Jul: An issue was discovered in the Linux kernel before 6.3.4. fs/ksmbd/connection.c in ksmbd has an off-by-one error in memory allocation (because of ksmbd_smb2_check_message) that may lead to out-of-bounds access.

Affected Products

cm1 kernel 5.10.188.1-1 on CBL Mariner 1.0
cbl2 kernel 5.15.122.1-2 on CBL Mariner 2.0

References

Published: 2023-07-11 · Source: Microsoft · Feed updated: 2026-10-31

This critical severity vulnerability with a CVSS score of 9.8 was published on 2023-07-11 via Microsoft. Affected: cm1 kernel 5.10.188.1-1 on CBL Mariner 1.0, cbl2 kernel 5.15.122.1-2 on CBL Mariner 2.0.

Risk Timeline

CVE Disclosed2023-07-11 · 1207 days ago

Remediation Resources

Official Advisory

msrc.microsoft.com/update-guide/vulnerability/CVE-2023-38429

NVD / MITRE

nvd.nist.gov/vuln/detail/CVE-2023-38429

Related Vulnerabilities

CVE	Title	Severity	CVSS
CVE-2023-38408 PoC	The PKCS#11 feature in ssh-agent in OpenSSH before 9.3p2 has an insufficiently t	CRITICAL	9.8
CVE-2023-38427	An issue was discovered in the Linux kernel before 6.3.8. fs/smb/server/smb2pdu.	CRITICAL	9.8
CVE-2023-38426	An issue was discovered in the Linux kernel before 6.3.4. ksmbd has an out-of-bo	CRITICAL	9.1
CVE-2023-38428	An issue was discovered in the Linux kernel before 6.3.4. fs/ksmbd/smb2pdu.c in	CRITICAL	9.1
CVE-2023-38430	An issue was discovered in the Linux kernel before 6.3.9. ksmbd does not validat	CRITICAL	9.1
CVE-2023-38431	An issue was discovered in the Linux kernel before 6.3.8. fs/smb/server/connecti	CRITICAL	9.1

vulnfeed aggregates 18441 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.