Out of Bounds Read Vulnerability in Linux Kernel ksmbd Component
CVE-2023-3867
What is CVE-2023-3867?
A vulnerability exists in the Linux kernel's ksmbd component, specifically related to the handling of SMB2 session setups in compound requests. When the second payload of a compound request is processed, an out of bounds read issue may occur while handling the first payload in the smb2_sess_setup() function. This flaw can potentially expose sensitive information or lead to unexpected system behavior, emphasizing the importance of timely updates and security patches.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
Affected Version(s)
Linux 0626e6641f6b467447c81dd7678a69c66f7746cf < 676392184785ace61e939831e7ca44a03d438c3b
Linux 0626e6641f6b467447c81dd7678a69c66f7746cf
Linux 0626e6641f6b467447c81dd7678a69c66f7746cf < 2ba03cecb12ac7ac9e0170e251543c56832d9959