SMB Command Request Size Validation Flaw in Linux Kernel

CVE-2023-4515

What is CVE-2023-4515?

A vulnerability in the Linux kernel's ksmbd component affects the validation of command request sizes. Specifically, the request sizes for most commands are not properly checked, potentially allowing an attacker to exploit this oversight. This issue was resolved by introducing checks for the request size of commands, ensuring that only valid and expected sizes are processed. Failing to validate command sizes could lead to undefined behavior or exploitation in systems running vulnerable kernel versions.

References