Description

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix out-of-bound read in smb2_write ksmbd_smb2_check_message doesn't validate hdr->NextCommand. If ->NextCommand is bigger than Offset + Length of smb2 write, It will allow oversized smb2 write length. It will cause OOB read in smb2_write.

INFO

Published Date :

2025-08-16T13:27:56.403Z

Last Modified :

2025-08-19T05:47:12.083Z

Source :

Linux
AFFECTED PRODUCTS

The following products are affected by CVE-2023-3865 vulnerability.

Vendors Products
Linux
  • Linux Kernel
REFERENCES

Here, you will find a curated list of external links that provide in-depth information to CVE-2023-3865.

URL Resource
https://git.kernel.org/stable/c/3813eee5154d6a4c5875cb4444cb2b63bac8947f cve-icon cve-icon
https://git.kernel.org/stable/c/58a9c41064df27632e780c5a3ae3e0e4284957d1 cve-icon cve-icon
https://git.kernel.org/stable/c/5fe7f7b78290638806211046a99f031ff26164e1 cve-icon cve-icon
https://git.kernel.org/stable/c/c86211159bc3178b891e0d60e586a32c7b6a231b cve-icon cve-icon
Login to claim this CVE

CVSS Vulnerability Scoring System

Detailed values of each vector for above chart.
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality Impact
Integrity Impact
Availability Impact