Security tracker / CVE-2023-32251

CVE-2023-32251

ksmbd: block asynchronous requests when making a delay on session setup

References

• Debian security tracker
• cve.org
• https://www.zerodayinitiative.com/advisories/ZDI-23-699/

Notes

 carnil> First introducing commit could not be determined.

Bugs

Status

Branch	Status
upstream	released (6.4-rc1) [b096d97f47326b1e2dbdef1c91fab69ffda54d17]
6.18-upstream-stable
6.17-upstream-stable
6.15-upstream-stable	N/A "Fixed before branching point"
6.12-upstream-stable	N/A "Fixed before branching point"
6.6-upstream-stable	N/A "Fixed before branching point"
6.1-upstream-stable	released (6.1.29) [502cf9709036d9305495876fa8c33c8a52541b15]
5.10-upstream-stable	needed
sid	released (6.3.7-1)
6.12-trixie-security
6.1-bookworm-security	released (6.1.37-1)
5.10-bullseye-security	needed