Buffer Length Validation Error in Linux Kernel's ksmbd Related to SMB2 File Operations

CVE-2023-4130

What is CVE-2023-4130?

A vulnerability exists within the ksmbd component of the Linux kernel, which mishandles the validation of the next length in the file's extended attribute buffer during SMB2 file operations. The issue arises specifically when multiple smb2_ea_info buffers are present in a FILE_FULL_EA_INFORMATION request. Inadequate validation of the buffer length prior to accessing the subsequent entry can lead to improper memory access and potential exploitation. This flaw highlights the need for stringent checks based on the buffer length versus offsets derived from previous entries to ensure system integrity and security.

References