Логотип exploitDog
bind:"BDU:2024-07843" OR bind:"CVE-2023-52480"
Консоль
Логотип exploitDog

exploitDog

bind:"BDU:2024-07843" OR bind:"CVE-2023-52480"

Количество 7

Количество 7

fstec логотип

BDU:2024-07843

почти 2 года назад

Уязвимость компонента ksmbd ядра операционной системы Linux, позволяющая нарушителю повысить свои привилегии

CVSS3: 8.8
EPSS: Низкий
ubuntu логотип

CVE-2023-52480

больше 1 года назад

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix race condition between session lookup and expire Thread A + Thread B ksmbd_session_lookup | smb2_sess_setup sess = xa_load | | | xa_erase(&conn->sessions, sess->id); | | ksmbd_session_destroy(sess) --> kfree(sess) | // UAF! | sess->last_active = jiffies | + This patch add rwsem to fix race condition between ksmbd_session_lookup and ksmbd_expire_session.

CVSS3: 7
EPSS: Низкий
redhat логотип

CVE-2023-52480

больше 1 года назад

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix race condition between session lookup and expire Thread A + Thread B ksmbd_session_lookup | smb2_sess_setup sess = xa_load | | | xa_erase(&conn->sessions, sess->id); | | ksmbd_session_destroy(sess) --> kfree(sess) | // UAF! | sess->last_active = jiffies | + This patch add rwsem to fix race condition between ksmbd_session_lookup and ksmbd_expire_session.

CVSS3: 7.1
EPSS: Низкий
nvd логотип

CVE-2023-52480

больше 1 года назад

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix race condition between session lookup and expire Thread A + Thread B ksmbd_session_lookup | smb2_sess_setup sess = xa_load | | | xa_erase(&conn->sessions, sess->id); | | ksmbd_session_destroy(sess) --> kfree(sess) | // UAF! | sess->last_active = jiffies | + This patch add rwsem to fix race condition between ksmbd_session_lookup and ksmbd_expire_session.

CVSS3: 7
EPSS: Низкий
debian логотип

CVE-2023-52480

больше 1 года назад

In the Linux kernel, the following vulnerability has been resolved: k ...

CVSS3: 7
EPSS: Низкий
github логотип

GHSA-v2j2-ph6r-wrg9

больше 1 года назад

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix race condition between session lookup and expire Thread A + Thread B ksmbd_session_lookup | smb2_sess_setup sess = xa_load | | | xa_erase(&conn->sessions, sess->id); | | ksmbd_session_destroy(sess) --> kfree(sess) | // UAF! | sess->last_active = jiffies | + This patch add rwsem to fix race condition between ksmbd_session_lookup and ksmbd_expire_session.

CVSS3: 7
EPSS: Низкий
redos логотип

ROS-20241002-06

10 месяцев назад

Множественные уязвимости kernel-lt

CVSS3: 8.8
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
fstec логотип
BDU:2024-07843

Уязвимость компонента ksmbd ядра операционной системы Linux, позволяющая нарушителю повысить свои привилегии

CVSS3: 8.8
0%
Низкий
почти 2 года назад
ubuntu логотип
CVE-2023-52480

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix race condition between session lookup and expire Thread A + Thread B ksmbd_session_lookup | smb2_sess_setup sess = xa_load | | | xa_erase(&conn->sessions, sess->id); | | ksmbd_session_destroy(sess) --> kfree(sess) | // UAF! | sess->last_active = jiffies | + This patch add rwsem to fix race condition between ksmbd_session_lookup and ksmbd_expire_session.

CVSS3: 7
0%
Низкий
больше 1 года назад
redhat логотип
CVE-2023-52480

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix race condition between session lookup and expire Thread A + Thread B ksmbd_session_lookup | smb2_sess_setup sess = xa_load | | | xa_erase(&conn->sessions, sess->id); | | ksmbd_session_destroy(sess) --> kfree(sess) | // UAF! | sess->last_active = jiffies | + This patch add rwsem to fix race condition between ksmbd_session_lookup and ksmbd_expire_session.

CVSS3: 7.1
0%
Низкий
больше 1 года назад
nvd логотип
CVE-2023-52480

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix race condition between session lookup and expire Thread A + Thread B ksmbd_session_lookup | smb2_sess_setup sess = xa_load | | | xa_erase(&conn->sessions, sess->id); | | ksmbd_session_destroy(sess) --> kfree(sess) | // UAF! | sess->last_active = jiffies | + This patch add rwsem to fix race condition between ksmbd_session_lookup and ksmbd_expire_session.

CVSS3: 7
0%
Низкий
больше 1 года назад
debian логотип
CVE-2023-52480

In the Linux kernel, the following vulnerability has been resolved: k ...

CVSS3: 7
0%
Низкий
больше 1 года назад
github логотип
GHSA-v2j2-ph6r-wrg9

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix race condition between session lookup and expire Thread A + Thread B ksmbd_session_lookup | smb2_sess_setup sess = xa_load | | | xa_erase(&conn->sessions, sess->id); | | ksmbd_session_destroy(sess) --> kfree(sess) | // UAF! | sess->last_active = jiffies | + This patch add rwsem to fix race condition between ksmbd_session_lookup and ksmbd_expire_session.

CVSS3: 7
0%
Низкий
больше 1 года назад
redos логотип
ROS-20241002-06

Множественные уязвимости kernel-lt

CVSS3: 8.8
10 месяцев назад

Уязвимостей на страницу