CVE-2023-32250: Linux Kernel

High severity, CVSS 8.1. EPSS: 2.6% chance of exploitation in the next 30 days.

A flaw was found in the Linux kernel's ksmbd, a high-performance in-kernel SMB server. The specific flaw exists within the processing of SMB2_SESSION_SETUP commands. The issue results from the lack of proper locking when performing operations on an object. An attacker can leverage this vulnerability to execute code in the context of the kernel.

Affected products

• Linux Linux Kernel: from 5.15, before 5.15.145 (fixed in 5.15.145); from 5.16, before 6.1.29 (fixed in 6.1.29); from 6.2, before 6.2.16 (fixed in 6.2.16); from 6.3, before 6.3.2 (fixed in 6.3.2)
• Netapp h300s: affected versions not specified
• Netapp h410s: affected versions not specified
• Netapp h500s: affected versions not specified
• Netapp h700s: affected versions not specified
• Netapp Hci: affected versions not specified
• Netapp Hci Storage Nodes: affected versions not specified

Published 2023-07-10. Last modified 2026-06-17.