NVD disclosure day

Published threat advisories for May 21, 2024

CVE advisoryCRITICAL

CVE-2023-52755

Linux Kernel ksmbd Slab Out-of-Bounds Write Vulnerability

Halo Surface Signal: 3 out of 5 — possibly public-facing.

A vulnerability in the Linux kernel's SMB server (ksmbd) allows an attacker to write out-of-bounds in memory, potentially leading to data corruption or code execution. While typically used internally, SMB can be exposed externally through misconfiguration, making this a concern for systems where it's accessible.

NVD modified: NVD date unavailable
CVE advisoryCRITICAL

CVE-2021-47232

Linux Kernel Use-after-Free in CAN J1939 Protocol

Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.

A Use-after-Free vulnerability exists in the Linux kernel's CAN J1939 protocol due to improper handling of network packet memory. This flaw could allow an attacker to cause denial of service or unauthorized access if the protocol is reachable. While external exposure is unlikely given typical use cases, it's important

NVD modified: NVD date unavailable