CVE-2023-32251

Summary

A vulnerability has been identified in the Linux kernel's ksmbd component (kernel SMB/CIFS server). A security control designed to prevent dictionary attacks, which introduces a 5-second delay during session setup, can be bypassed through the use of asynchronous requests. This bypass negates the intended anti-brute-force protection, potentially allowing attackers to conduct dictionary attacks more efficiently against user credentials or other authentication mechanisms.

Affected Software

VendorProductVersion RangeStatus
0 < 5.15.145affected
6.0.0 < 6.0.*affected
6.1.0 < 6.1.29affected
6.2.0 < 6.2.16affected
6.3.0 < 6.3.2affected

Weaknesses

  • CWE-307: Improper Restriction of Excessive Authentication Attempts

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References