CVE-2023-52440 PoC — Linux kernel 安全漏洞

Source

https://github.com/BitsByWill/ksmbd-n-day

Associated Vulnerability

Title:Linux kernel 安全漏洞 (CVE-2023-52440)
Description:Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel 存在安全漏洞，该漏洞源于 ksmbd 的 ksmbd_decode_ntlmssp_auth_blob() 函数存在溢出问题。

Description

Authenticated 0-click RCE against Linux 6.1.45 for CVE-2023-52440 and CVE-2023-4130

Readme

# README

This repo accompanies my research article [Eternal-Tux: Crafting a Linux Kernel KSMBD 0-Click RCE Exploit from N-Days](https://www.willsroot.io/2025/09/ksmbd-0-click.html), in which I develop a POC for n-days from 2023: CVE-2023-52440 and CVE-2023-4130.

I provide the kernel .config, a kernel run script, an image build script, and the POC.

The image creation script comes from [Syzkaller](https://github.com/google/syzkaller/blob/master/tools/create-image.sh). The diff for [impacket](https://github.com/fortra/impacket/tree/master) comes from commit 7561038277f4b08a16f37aac886cfe0193e75434.

This is solely for research purposes only. In fact, this POC was designed on an extremely out of date LTS kernel (6.1.45), on a custom kernel config, and on a custom build toolchain.

File Snapshot


 [4.0K]  /data/pocs/eff7832ae0789f38eb36a2efc358008e7c9158c5
├── [6.2K]  build-image.sh
├── [ 25K]  impacket.diff
├── [101K]  kconfig
├── [ 11K]  poc.py
└── [ 791]  README.md

0 directories, 5 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!