Entreprise d'experts en Sécurité Informatique : Audits et conseils en cybersécurité
Entreprise française de cybersécurité depuis 2004
☎ 03 60 47 09 81 - info@securiteinfo.com


CVE-2023-32246

Description

In the Linux kernel, the following vulnerability has been resolved:ksmbd: call rcu_barrier() in ksmbd_server_exit()racy issue is triggered the bug by racing between closing a connectionand rmmod. In ksmbd, rcu_barrier() is not called at module unload time,so nothing prevents ksmbd from getting unloaded while it still has RCUcallbacks pending. It leads to trigger unintended execution of kernelcode locally and use to defeat protections such as Kernel Lockdown

POC

Reference

No PoCs from references.

Github

- https://github.com/fkie-cad/nvd-json-data-feeds