In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix slab out of bounds write in smb_inherit_dacl() slab out-of-bounds write is caused by that offsets is bigger than pntsd allocation size. This patch add the check to validate 3 offsets using allocation size.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - ksmbd: fix slab out of bounds write in smb_inherit_dacl() slab out-of-bounds write is caused by that     offsets is bigger than pntsd allocation size. This patch add the check to validate 3 offsets using     allocation size. (CVE-2023-52755)

Note that Nessus relies on the presence of the package as reported by the vendor.

An update of the linux package has been released.

ID	Name	Product	Family	Severity
239342	TencentOS Server 4: kernel (TSSA-2024:0981)	Nessus	Tencent Local Security Checks	high
226632	Linux Distros Unpatched Vulnerability : CVE-2023-52755	Nessus	Misc.	high
204441	Photon OS 5.0: Linux PHSA-2024-5.0-0187	Nessus	PhotonOS Local Security Checks	high

Detections

Analytics

CVE-2023-52755

high

Tenable Plugins

high

high

high