Riskcovery

CVE-2023-3866

ksmbd: validate session id and tree id in the compound request

State
Published
Severity
7.5 High
Published
Aug 16, 2025
Updated
Aug 5, 2026
Reserved
Jul 24, 2023

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

ksmbd: validate session id and tree id in the compound request

This patch validate session id and tree id in compound request. If first operation in the compound is SMB2 ECHO request, ksmbd bypass session and tree validation. So work->sess and work->tcon could be NULL. If secound request in the compound access work->sess or tcon, It cause NULL pointer dereferecing error.

Scores

CVSSScoreVectorSource
3.17.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HLinux

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 0626e6641f6b467447c81dd7678a69c66f7746cf to before eb947403518ea3d93f6d89264bb1f5416bb0c7d0Affected
  • 0626e6641f6b467447c81dd7678a69c66f7746cf to before 854156d12caa9d36de1cf5f084591c7686cc8a9dAffected
  • 0626e6641f6b467447c81dd7678a69c66f7746cf to before d1066c1b3663401cd23c0d6e60cdae750ce00c0fAffected
  • 0626e6641f6b467447c81dd7678a69c66f7746cf to before 5005bcb4219156f1bf7587b185080ec1da08518eAffected
LinuxLinux
  • 5.15Affected
  • before 5.15Not affected
  • 5.15.121 through 5.15.*Not affected
  • 6.1.36 through 6.1.*Not affected
  • 6.3.10 through 6.3.*Not affected
  • 6.4 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.