QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2023-3865

Back to search

CVE-2023-3865

Published: Aug 16, 2025

Modified: May 11, 2026

PUBLISHED

Description

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix out-of-bound read in smb2_write ksmbd_smb2_check_message doesn't validate hdr->NextCommand. If ->NextCommand is bigger than Offset + Length of smb2 write, It will allow oversized smb2 write length. It will cause OOB read in smb2_write.

VendorProductVersions

Linux

Linux

affected
0626e6641f6b467447c81dd7678a69c66f7746cf - < 3813eee5154d6a4c5875cb4444cb2b63bac8947f
affected
0626e6641f6b467447c81dd7678a69c66f7746cf - < c86211159bc3178b891e0d60e586a32c7b6a231b
affected
0626e6641f6b467447c81dd7678a69c66f7746cf - < 58a9c41064df27632e780c5a3ae3e0e4284957d1
affected
0626e6641f6b467447c81dd7678a69c66f7746cf - < 5fe7f7b78290638806211046a99f031ff26164e1

Linux

Linux

affected
5.15
unaffected
0 - < 5.15
unaffected
5.15.121 - <= 5.15.*
unaffected
6.1.36 - <= 6.1.*
unaffected
6.3.10 - <= 6.3.*

+1 more versions

References

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now