CVE-2023-4515

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2023-4515
In the Linux kernel, the following vulnerability has been resolved: ksmbd: validate command request size In commit 2b9b8f3b68ed ("ksmbd: validate command payload size"), except for SMB2_OPLOCK_BREAK_HE command, the request size of other commands is not checked, it's not expected. Fix it by add check for request size of other commands.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/595679098bdcdbfbba91ebe07a2f7f208df93870 Patch
https://git.kernel.org/stable/c/5aa4fda5aa9c2a5a7bac67b4a12b089ab81fee3c Patch
https://git.kernel.org/stable/c/c6bef3bc30fd4a175aef846b7d928a6c40d091cd Patch
https://git.kernel.org/stable/c/ff7236b66d69582f90cf5616e63cfc3dc18142bb Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.4:-:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.5:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.5:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.5:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.5:rc4:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.5:rc5:*:*:*:*:*:*
History

18 Nov 2025, 17:59

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/595679098bdcdbfbba91ebe07a2f7f208df93870 - () https://git.kernel.org/stable/c/595679098bdcdbfbba91ebe07a2f7f208df93870 - Patch
References () https://git.kernel.org/stable/c/5aa4fda5aa9c2a5a7bac67b4a12b089ab81fee3c - () https://git.kernel.org/stable/c/5aa4fda5aa9c2a5a7bac67b4a12b089ab81fee3c - Patch
References () https://git.kernel.org/stable/c/c6bef3bc30fd4a175aef846b7d928a6c40d091cd - () https://git.kernel.org/stable/c/c6bef3bc30fd4a175aef846b7d928a6c40d091cd - Patch
References () https://git.kernel.org/stable/c/ff7236b66d69582f90cf5616e63cfc3dc18142bb - () https://git.kernel.org/stable/c/ff7236b66d69582f90cf5616e63cfc3dc18142bb - Patch
CWE NVD-CWE-noinfo
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
First Time Linux
Linux linux Kernel
CPE cpe:2.3:o:linux:linux_kernel:6.5:rc4:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.4:-:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.5:rc5:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.5:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.5:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.5:rc3:*:*:*:*:*:*

18 Aug 2025, 20:16

Type Values Removed Values Added
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: ksmbd: validar el tamaño de la solicitud de comando. En el commit 2b9b8f3b68ed ("ksmbd: validar el tamaño del payload del comando"), excepto para el comando SMB2_OPLOCK_BREAK_HE, no se comprueba el tamaño de la solicitud de otros comandos, lo cual no es lo esperado. Se puede solucionar añadiendo la comprobación del tamaño de la solicitud de otros comandos.

16 Aug 2025, 14:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-08-16 14:15

Updated : 2025-11-18 17:59

NVD link : CVE-2023-4515

Mitre link : CVE-2023-4515

CVE.ORG link : CVE-2023-4515

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
NVD-CWE-noinfo