USN-6725-2: Linux kernel (AWS) vulnerabilities

Chih-Yen Chang discovered that the KSMBD implementation in the Linux kernel
did not properly validate certain data structure fields when parsing lease
contexts, leading to an out-of-bounds read vulnerability. A remote attacker
could use this to cause a denial of service (system crash) or possibly
expose sensitive information. (CVE-2023-1194)

Quentin Minster discovered that a race condition existed in the KSMBD
implementation in the Linux kernel, leading to a use-after-free
vulnerability. A remote attacker could use this to cause a denial …

attacker aws crash cve data denial of service expose implementation information kernel ksmbd linux linux kernel out-of-bounds parsing race sensitive sensitive information service structure system usn vulnerabilities vulnerability