CVE-2023-32249

In the Linux kernel, the following vulnerability has been resolved:

ksmbd: not allow guest user on multichannel

This patch return STATUS_NOT_SUPPORTED if binding session is guest.

This vulnerability is rated as Moderate impact because unauthorized session binding over multichannel SMB requires an established guest connection to trigger unexpected server states or denial of service. Red Hat Enterprise Linux does not compile or distribute the in-kernel ksmbd server module, providing SMB file sharing capabilities exclusively through user-space Samba services instead. Consequently, Red Hat Enterprise Linux is not affected by this flaw.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.