Riskcovery

CVE-2023-3865

ksmbd: fix out-of-bound read in smb2_write

State
Published
Severity
8.1 High
Published
Aug 16, 2025
Updated
Aug 15, 2026
Reserved
Jul 24, 2023

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

ksmbd: fix out-of-bound read in smb2_write

ksmbd_smb2_check_message doesn't validate hdr->NextCommand. If ->NextCommand is bigger than Offset + Length of smb2 write, It will allow oversized smb2 write length. It will cause OOB read in smb2_write.

Scores

CVSSScoreVectorSource
3.18.1 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:HLinux

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • e2f34481b24db2fd634b5edb0a5bd0e4d38cc6e9 to before 3813eee5154d6a4c5875cb4444cb2b63bac8947fAffected
  • e2f34481b24db2fd634b5edb0a5bd0e4d38cc6e9 to before c86211159bc3178b891e0d60e586a32c7b6a231bAffected
  • e2f34481b24db2fd634b5edb0a5bd0e4d38cc6e9 to before 58a9c41064df27632e780c5a3ae3e0e4284957d1Affected
  • e2f34481b24db2fd634b5edb0a5bd0e4d38cc6e9 to before 5fe7f7b78290638806211046a99f031ff26164e1Affected
LinuxLinux
  • 5.15Affected
  • before 5.15Not affected
  • 5.15.121 through 5.15.*Not affected
  • 6.1.36 through 6.1.*Not affected
  • 6.3.10 through 6.3.*Not affected
  • 6.4 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.