CVE-2023-38430

—

CVSS 3.1

9.1 critical

EPSS

1%p65

Published

Jul 18, 2023 (Jul 18, 2023)

Modified

Jun 17, 2026

Description

An issue was discovered in the Linux kernel before 6.3.9. ksmbd does not validate the SMB request protocol ID, leading to an out-of-bounds read.

Vendors: linux netapp
Products: linux kernel, hci management node, h300s, h410s, h500s, h700s
Weakness: CWE-125
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

NVD CVE.org GitHub PoCs EPSS (1.2%)

In the news0 stories

No ingested article mentions this CVE yet.