Executive Summary

This vulnerability exists in the Linux kernel's ksmbd component, where a failure in a multichannel session binding request (such as providing a wrong password) causes the system to incorrectly expire an active session.

Specifically, when a binding request fails, the error handling code sets the session state to SMB2_SESSION_EXPIRED unconditionally. However, the session being expired actually belongs to another user's connection, not the one making the request.

This flaw allows a remote attacker to invalidate any active session by sending a binding request with an incorrect password, effectively causing a denial of service (DoS) by expiring sessions they do not own.

Useful 0 Not Useful 0

Impact Analysis

This vulnerability can impact you by allowing a remote attacker to disrupt your active sessions on the Linux kernel's ksmbd service.

By sending a binding request with a wrong password, an attacker can cause your active sessions to be expired unexpectedly, resulting in denial of service (DoS). This means legitimate users may lose access or experience interruptions in service.

Useful 0 Not Useful 0

Mitigation Strategies

The vulnerability is resolved by a fix in the Linux kernel's ksmbd component that prevents session expiration on binding failure.

To mitigate this vulnerability immediately, you should update your Linux kernel to a version that includes this fix.

Useful 0 Not Useful 0