CVE-2023-32249

ksmbd: not allow guest user on multichannel

MEDIUM

5.5

CVSS Score

Published: August 16, 2025 at 01:25 PM UTC

Updated: August 15, 2026 at 01:17 PM UTC

1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

MEDIUM5.5

Exploit prediction

EPSS 0.4%

Description

In the Linux kernel, the following vulnerability has been resolved: ksmbd: not allow guest user on multichannel This patch return STATUS_NOT_SUPPORTED if binding session is guest.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Linux Kernel · Linux

95%

5.15 ≤ v < 5.15.1125.15 ≤ v < 6.1.285.15 ≤ v < 6.2.155.15 ≤ v < 6.3.25.15 ≤ v < 6.45.16 ≤ v < 6.1.286.2 ≤ v < 6.2.156.3 ≤ v < 6.3.25.15f5a544e3bab78142207e0242d22442db85ba1eff

Vendor states this is fixed in 088131b7b01099720a528a72005ff17868705d40 (fixed)

Vendor states this is fixed in 1f0490586544455e5be698be2e6c30077b4ec461 (fixed)

Vendor states this is fixed in 3353ab2df5f68dab7da8d5ebb427a2d265a1f2b2 (fixed)

Vendor states this is fixed in 4a98e859c4673013385a54084e0cd865695ca072 (fixed)

Vendor states this is fixed in ed76d3a8910be06cd4e4ba63bf6075bf903945a1 (fixed)

Vendor states this is fixed in 5.15 (unaffected)

Vendor states this is fixed in 5.15.112 (unaffected)

Vendor states this is fixed in 6.1.28 (unaffected)

Vendor states this is fixed in 6.2.15 (unaffected)

Vendor states this is fixed in 6.3.2 (unaffected)

Vendor states this is fixed in 6.4 (unaffected)