VDB
CVE-2023-54250
CVE-2023-54250
PUBLISHED
In the Linux kernel, the following vulnerability has been resolved: ksmbd: avoid out of bounds access in decode_preauth_ctxt() Confirm that the accessed pneg_ctxt->HashAlgorithms address sits within the SMB request boundary; deassemble_neg_contexts() only checks that the eight byte smb2_neg_context header + (client controlled) DataLength are within the packet boundary, which is insufficient. Checking for sizeof(struct smb2_preauth_neg_context) is overkill given that the type currently assumes SMB311_SALT_SIZE bytes of trailing Salt.
EPSS 0.02% · 7.2th percentile
Risk Scores
EPSS Score
0.02%
7.2th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Linux | Linux | 0, 6.2.12, * |
| linux | linux_kernel | 5.15, 5.15, 5.15 |
Exploit Intelligence
- CIRCL seen: CVE-2023-54250 (circl-sighting)
- https://git.kernel.org/stable/c/39f5b4b313b445c980a2a295bed28228c29228ed (circl)
- https://git.kernel.org/stable/c/a2f6ded41bec1d3be643c80a5eb97f1680309001 (circl)
- https://git.kernel.org/stable/c/f02edb9debbd36f44efa7567031485892c7df60d (circl)
- https://git.kernel.org/stable/c/e7067a446264a7514fa1cfaa4052cdb6803bc6a2 (circl)
Timeline
- Dec 30, 2025 CVE Published
- Dec 30, 2025 PoC Published
- Dec 31, 2025 EPSS Score
- Jan 3, 2026 EPSS Score
- Jan 7, 2026 EPSS Score
- Jan 10, 2026 EPSS Score
- Jan 14, 2026 EPSS Score
- Jan 17, 2026 EPSS Score
- Jan 21, 2026 EPSS Score
- Jan 24, 2026 EPSS Score
- Jan 28, 2026 EPSS Score
- Jan 31, 2026 EPSS Score
References
- https://git.kernel.org/stable/c/39f5b4b313b445c980a2a295bed28228c29228ed url
- https://git.kernel.org/stable/c/a2f6ded41bec1d3be643c80a5eb97f1680309001 url
- https://git.kernel.org/stable/c/f02edb9debbd36f44efa7567031485892c7df60d url
- https://git.kernel.org/stable/c/e7067a446264a7514fa1cfaa4052cdb6803bc6a2 url
- https://nvd.nist.gov/vuln/detail/CVE-2023-54250 advisory