{"affected":[{"defaultStatus":"unaffected","ecosystem":"https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/","packageName":"linux","product":"","source":"CNA: redhat","vendor":"","versions":[{"lessThan":"5.15.111","status":"affected","version":"0","versionType":"semvar"},{"lessThan":"6.0.*","status":"affected","version":"6.0.0","versionType":"semvar"},{"lessThan":"6.1.28","status":"affected","version":"6.1.0","versionType":"semvar"},{"lessThan":"6.2.15","status":"affected","version":"6.2.0","versionType":"semvar"},{"lessThan":"6.3.2","status":"affected","version":"6.3.0","versionType":"semvar"}]},{"defaultStatus":"unaffected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"kernel","product":"Red Hat Enterprise Linux 10","source":"CNA: redhat","vendor":"Red Hat","versions":[]},{"defaultStatus":"unaffected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"kernel","product":"Red Hat Enterprise Linux 6","source":"CNA: redhat","vendor":"Red Hat","versions":[]},{"defaultStatus":"unaffected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"kernel","product":"Red Hat Enterprise Linux 7","source":"CNA: redhat","vendor":"Red Hat","versions":[]},{"defaultStatus":"unaffected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"kernel-rt","product":"Red Hat Enterprise Linux 7","source":"CNA: redhat","vendor":"Red Hat","versions":[]},{"defaultStatus":"unaffected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"kernel","product":"Red Hat Enterprise Linux 8","source":"CNA: redhat","vendor":"Red Hat","versions":[]},{"defaultStatus":"unaffected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"kernel-rt","product":"Red Hat Enterprise Linux 8","source":"CNA: redhat","vendor":"Red Hat","versions":[]},{"defaultStatus":"unaffected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"kernel","product":"Red Hat Enterprise Linux 9","source":"CNA: redhat","vendor":"Red Hat","versions":[]},{"defaultStatus":"unaffected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"kernel-rt","product":"Red Hat Enterprise Linux 9","source":"CNA: redhat","vendor":"Red Hat","versions":[]}],"cveId":"CVE-2023-32255","cwes":["CWE-772"],"description":"A flaw was found in the Linux kernel's ksmbd component. A memory leak can occur if a client sends a session setup request with an unknown NTLMSSP message type,  potentially leading to resource exhaustion.","epss":{"date":"2026-11-08","percentile":0.46426,"score":0.00553},"exploits":[],"kev":null,"metrics":[{"score":5.3,"severity":"medium","source":"CNA: redhat","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","version":"3.1"}],"modifiedAt":1794193382105,"publishedAt":1754173545342,"references":[{"source":"CNA: redhat","tags":["vdb-entry","x_refsource_REDHAT"],"url":"https://access.redhat.com/security/cve/CVE-2023-32255"},{"source":"CNA: redhat","tags":["issue-tracking","x_refsource_REDHAT"],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2385884"},{"source":"CNA: redhat","tags":[],"url":"https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=6d7cb549c2ca20e1f07593f15e936fd54b763028"},{"source":"CNA: redhat","tags":[],"url":"https://www.zerodayinitiative.com/advisories/ZDI-23-703/"}],"remediation":[],"revision":"bfc2844b28c3045317e6cfc45b38e88dbb7aaf7740e248f9f160fff381294423","sources":[{"modifiedAt":1794193382105,"name":"CNA: redhat","retrievedAt":1794197301049,"url":"https://www.cve.org/CVERecord?id=CVE-2023-32255"},{"modifiedAt":null,"name":"FIRST EPSS","retrievedAt":1794197311870,"url":"https://api.first.org/data/v1/epss?cve=CVE-2023-32255"}],"ssvc":{"assessedAt":1754313659965,"automatable":"yes","exploitation":"none","source":"ADP: CISA-ADP","technicalImpact":"partial"},"status":"published","title":"Kernel: memory leak via ksmbd session setup request with unknown ntlmssp message type","updatedAt":1794197311870}