Out of Bounds Read Vulnerability in Linux Kernel ksmbd Component

CVE-2023-3867

What is CVE-2023-3867?

A vulnerability exists in the Linux kernel's ksmbd component, specifically related to the handling of SMB2 session setups in compound requests. When the second payload of a compound request is processed, an out of bounds read issue may occur while handling the first payload in the smb2_sess_setup() function. This flaw can potentially expose sensitive information or lead to unexpected system behavior, emphasizing the importance of timely updates and security patches.

References