In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix slab out of bounds write in smb_inherit_dacl() slab out-of-bounds write is caused by that offsets is bigger than pntsd allocation size. This patch add the check to validate 3 offsets using allocation size.

An update of the linux package has been released.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - ksmbd: fix slab out of bounds write in smb_inherit_dacl() slab out-of-bounds write is caused by that     offsets is bigger than pntsd allocation size. This patch add the check to validate 3 offsets using     allocation size. (CVE-2023-52755)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Type	Severity
332346	Photon OS 5.0: Linux PHSA-2024-5.0-91-0187	Nessus	PhotonOS Local Security Checks	Local	high
239342	TencentOS Server 4: kernel (TSSA-2024:0981)	Nessus	Tencent Local Security Checks	Local	high
226632	Linux Distros Unpatched Vulnerability : CVE-2023-52755	Nessus	Misc.	Local	high
204441	Photon OS 5.0: Linux PHSA-2024-5.0-0187	Nessus	PhotonOS Local Security Checks	Local	high

Detections

Analytics

CVE-2023-52755

high

Tenable Plugins

high

high

high

high