CVE-2023-32256

Published: Aug 1, 2025Modified: Jun 29, 2026Deferred

7.5

Vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:N/A:H

Exploitability: 2.2 / Impact: 4.7

Source: secalert@redhat.com (Secondary)

Description

A flaw was found in the Linux kernel's ksmbd component. A race condition between smb2 close operation and logoff in multichannel connections could result in a use-after-free issue.

Related CWEs

CWE-421

Race Condition During Access to Alternate Channel

The product opens an alternate channel to communicate with an authorized user, but the channel is accessible to other actors.

References (4)

https://access.redhat.com/security/cve/CVE-2023-32256

Source: secalert@redhat.com

https://bugzilla.redhat.com/show_bug.cgi?id=2385885

Source: secalert@redhat.com

https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=abcc506a9a71976a8b4c9bf3ee6efd13229c1e19

Source: secalert@redhat.com

https://www.zerodayinitiative.com/advisories/ZDI-23-704/

Source: secalert@redhat.com

Timeline

No history available yet.