CVE-2023-54250: Linux

High severity, CVSS 8.2. EPSS: 0.5% chance of exploitation in the next 30 days.

In the Linux kernel, the following vulnerability has been resolved: ksmbd: avoid out of bounds access in decode_preauth_ctxt() Confirm that the accessed pneg_ctxt->HashAlgorithms address sits within the SMB request boundary; deassemble_neg_contexts() only checks that the eight byte smb2_neg_context header + (client controlled) DataLength are within the packet boundary, which is insufficient. Checking for sizeof(struct smb2_preauth_neg_context) is overkill given that the type currently assumes SMB311_SALT_SIZE bytes of trailing Salt.

Affected products

• Linux Linux: from 5.15, before 5.15.145 (fixed in 5.15.145); from 5.16, before 6.1.25 (fixed in 6.1.25); from 6.2, before 6.2.12 (fixed in 6.2.12)

Published 2025-12-30. Last modified 2026-08-04.