CVE-2023-3865

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2023-3865
In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix out-of-bound read in smb2_write ksmbd_smb2_check_message doesn't validate hdr->NextCommand. If ->NextCommand is bigger than Offset + Length of smb2 write, It will allow oversized smb2 write length. It will cause OOB read in smb2_write.

7.1 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 5.2

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/3813eee5154d6a4c5875cb4444cb2b63bac8947f Patch
https://git.kernel.org/stable/c/58a9c41064df27632e780c5a3ae3e0e4284957d1 Patch
https://git.kernel.org/stable/c/5fe7f7b78290638806211046a99f031ff26164e1 Patch
https://git.kernel.org/stable/c/c86211159bc3178b891e0d60e586a32c7b6a231b Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.4:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.4:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.4:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.4:rc4:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.4:rc5:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.4:rc6:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.4:rc7:*:*:*:*:*:*
History

18 Nov 2025, 17:57

Type Values Removed Values Added
First Time Linux
Linux linux Kernel
CPE cpe:2.3:o:linux:linux_kernel:6.4:rc5:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.4:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.4:rc4:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.4:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.4:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.4:rc7:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.4:rc6:*:*:*:*:*:*
CWE CWE-125
References () https://git.kernel.org/stable/c/3813eee5154d6a4c5875cb4444cb2b63bac8947f - () https://git.kernel.org/stable/c/3813eee5154d6a4c5875cb4444cb2b63bac8947f - Patch
References () https://git.kernel.org/stable/c/58a9c41064df27632e780c5a3ae3e0e4284957d1 - () https://git.kernel.org/stable/c/58a9c41064df27632e780c5a3ae3e0e4284957d1 - Patch
References () https://git.kernel.org/stable/c/5fe7f7b78290638806211046a99f031ff26164e1 - () https://git.kernel.org/stable/c/5fe7f7b78290638806211046a99f031ff26164e1 - Patch
References () https://git.kernel.org/stable/c/c86211159bc3178b891e0d60e586a32c7b6a231b - () https://git.kernel.org/stable/c/c86211159bc3178b891e0d60e586a32c7b6a231b - Patch
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 7.1

18 Aug 2025, 20:16

Type Values Removed Values Added
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: ksmbd: se corrige una lectura fuera de los límite en smb2_write. ksmbd_smb2_check_message no valida hdr->NextCommand. Si ->NextCommand es mayor que Offset + Length de la escritura smb2, se permite una longitud de escritura smb2 sobredimensionada. Esto provoca una lectura fuera de los límite en smb2_write.

16 Aug 2025, 14:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-08-16 14:15

Updated : 2025-11-18 17:57

NVD link : CVE-2023-3865

Mitre link : CVE-2023-3865

CVE.ORG link : CVE-2023-3865

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-125

Out-of-bounds Read