Skip to content
CVE PROGRAM SOURCE RECORD9.1 Critical

CVE-2023-4515

ksmbd: validate command request size

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: ksmbd: validate command request size In commit 2b9b8f3b68ed ("ksmbd: validate command payload size"), except for SMB2_OPLOCK_BREAK_HE command, the request size of other commands is not checked, it's not expected. Fix it by add check for request size of other commands.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 35f450f54dca1519bb24faacd0428db09f89a11f to < 595679098bdcdbfbba91ebe07a2f7f208df93870affected
  • 9650cf70ec9d94ff34daa088b643229231723c26 to < c6bef3bc30fd4a175aef846b7d928a6c40d091cdaffected
  • 2b9b8f3b68edb3d67d79962f02e26dbb5ae3808d to < ff7236b66d69582f90cf5616e63cfc3dc18142bbaffected
  • 2b9b8f3b68edb3d67d79962f02e26dbb5ae3808d to < 5aa4fda5aa9c2a5a7bac67b4a12b089ab81fee3caffected
  • 768caf4019f0391c0b6452afe34cea1704133f7baffected
  • 5.15.121 to < 5.15.127affected
  • 6.1.36 to < 6.1.46affected
  • 6.3.10 to < 6.4affected

Linux Linux

Default version status: affected

  • 6.4affected
  • 0 to < 6.4unaffected
  • 5.15.127 to ≤ 5.15.*unaffected
  • 6.1.46 to ≤ 6.1.*unaffected
  • 6.4.11 to ≤ 6.4.*unaffected
  • 6.5 to ≤ *unaffected

References