Description
Linux内核的ksmbd中存在特定指针释放后重复使用的漏洞。该漏洞是由于在处理SMB2_TREE_DISCONNECT请求时未能验证对象是否存在造成的。
Linux Kernel ksmbd SMB2_TREE_DISCONNECT 资源管理错误漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://xxb.ecust.edu.cn/2023/0522/c10001726a10017737/page.htm
https://www.wiz.io/blog/cve-2022-47939-critical-vulnerability-linux-kernel-ksmbd-module-everything-you-ne
https://www.juniper.net/us/en/threatlabs/ips-signatures/detail.SMB:KSMBD-SMB2-TREE-DISCNT-UAF.html
https://kudelskisecurity.com/research/linux-kernel-ksmbd-remote-code-execution-vulnerability
https://nic.seu.edu.cn/info/1047/1315.htm
https://cyberhoot.com/zh-CN/%E6%96%B0%E9%97%BB/%E6%96%B0%E7%9A%84-Linux-%E5%86%85%E6%A0%B8-bug-%E6%98%AF%E7%8E%B0%E5%9C%A8%E7%9A%84-%E6%9D%A5%E8%AF%91%E5%80%BC%E9%9C%80%E7%AB%8B%E5%88%86%E5%8F%91%EF%BC%8C%E5%8C%85%E5%90%ABksmbd-%E6%96%B9%E6%A1%88/
https://www.klepb.klcg.gov.tw/tw/klepb1/3522-265554.html
https://www.deepseas.com/resources/threat-intel/linux-kernel-ksmbd-use-after-free-vulnerability/
https://www.sentinelone.com/vulnerability-database/cve-2023-32254/
https://explore.alas.aws.amazon.com/CVE-2023-32254.html
https://nvd.nist.gov/vuln/detail/CVE-2022-47939