Executive Summary

This vulnerability occurs in the Linux kernel's ksmbd component, where when the per-IP connection limit is exceeded, the code fails to close the newly accepted socket. Instead, it sets an error and continues accepting connections, which causes a socket to be leaked for each rejected connection attempt from a single IP. This leads to resource exhaustion and enables a trivial remote denial-of-service (DoS) attack.

Useful 0 Not Useful 0

Impact Analysis

The vulnerability can impact you by allowing an attacker to exhaust system resources through leaking sockets when the per-IP connection limit is exceeded. This can cause a denial-of-service (DoS) condition, making the affected system unresponsive or unable to accept legitimate connections.

Useful 0 Not Useful 0

Mitigation Strategies

To mitigate this vulnerability, update your Linux kernel to a version where the ksmbd per-IP connection limit bug is fixed. This fix ensures that accepted sockets are properly closed when the per-IP limit is exceeded, preventing socket leaks and remote DoS attacks.

Useful 0 Not Useful 0