by Kastro
Paper/Archive/CVE-2023-4515

CVE-2023-4515

Linux Linux — ksmbd: validate command request size

EPSS 0.3%CVSS 9.1
critical.is priorityof 100
32
CVSS 9.1 (CNA)9.1 / 10 × 3027.3Not in CISA KEV+300.0EPSS percentile 24.1.241 × 204.8No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

In the Linux kernel, the following vulnerability has been resolved: ksmbd: validate command request size In commit 2b9b8f3b68ed ("ksmbd: validate command payload size"), except for SMB2_OPLOCK_BREAK_HE command, the request size of other commands is not checked, it's not expected. Fix it by add check for request size of other commands.

Affected

ProductAffectedFixed inSource
Linux35f450f54dca1519bb24faacd0428db09f89a11f – < 595679098bdcdbfbba91ebe07a2f7f208df93870595679098bdcdbfbba91ebe07a2f7f208df93870CNA
Linux9650cf70ec9d94ff34daa088b643229231723c26 – < c6bef3bc30fd4a175aef846b7d928a6c40d091cdc6bef3bc30fd4a175aef846b7d928a6c40d091cdCNA
Linux2b9b8f3b68edb3d67d79962f02e26dbb5ae3808d – < ff7236b66d69582f90cf5616e63cfc3dc18142bbff7236b66d69582f90cf5616e63cfc3dc18142bbCNA
Linux2b9b8f3b68edb3d67d79962f02e26dbb5ae3808d – < 5aa4fda5aa9c2a5a7bac67b4a12b089ab81fee3c5aa4fda5aa9c2a5a7bac67b4a12b089ab81fee3cCNA
Linux768caf4019f0391c0b6452afe34cea1704133f7b–CNA
Linux5.15.121 – < 5.15.1275.15.127CNA
Linux6.1.36 – < 6.1.466.1.46CNA
Linux6.3.10 – < 6.46.4CNA
Linux6.46.1.46CNA

Scores by source

Linux (CNA)9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

References

refgit.kernel.org/stable/c/595679098bdcdbfbba91ebe07a2f7f208df93870refgit.kernel.org/stable/c/c6bef3bc30fd4a175aef846b7d928a6c40d091cdrefgit.kernel.org/stable/c/ff7236b66d69582f90cf5616e63cfc3dc18142bbrefgit.kernel.org/stable/c/5aa4fda5aa9c2a5a7bac67b4a12b089ab81fee3c