CVE-2023-54258: Linux 6.3.13 to before 6.4, 5.15.121 to before 5.15.128, 6.1.39 to before 6.1.47, 6.4.4 to before 6.4.12

Affected technology

Linux · 63fb45ddc491895c4b36664e0c2c3b548545ae93 to before b99f490ea87ebcca3a429fd8837067feb56a4c7c, 1bf709b9625001eefdd41048c5f4c7544ee33394 to before 5ee28bcfbaacf289eb25c662a2862542ea6ce6a7, 3b4c15171c3ce9120c81f5564b9367d8d0f4219c to before 6b67a6d2e50634fe127e656147c81915955e9f5e, da787d5b74983f7525d1eb4b9c0b4aff2821511a to before e8f5f849ffce24490eb9449e98312b66c0dba76f, cff7fb969edaeff2bc80c8a8f7cf7b0c8df32da7, 6.3.13 to before 6.4
Linux

Linux · 5.15.121 to before 5.15.128, 6.1.39 to before 6.1.47, 6.4.4 to before 6.4.12
Linux

Component: Not specified by the source
File: fs/smb/client/file.c

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 9.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.