CVE-2023-38430: Linux Kernel

Critical severity, CVSS 9.1. EPSS: 1.2% chance of exploitation in the next 30 days.

An issue was discovered in the Linux kernel before 6.3.9. ksmbd does not validate the SMB request protocol ID, leading to an out-of-bounds read.

Affected products

• Linux Linux Kernel: from 5.15, before 5.15.145 (fixed in 5.15.145); from 5.16, before 6.1.35 (fixed in 6.1.35); from 6.2, before 6.3.9 (fixed in 6.3.9)
• Netapp h300s: affected versions not specified
• Netapp h410s: affected versions not specified
• Netapp h500s: affected versions not specified
• Netapp h700s: affected versions not specified
• Netapp Hci Management Node: affected versions not specified

Published 2023-07-18. Last modified 2026-06-17.