Linux Kernel ksmbd Vulnerability Fixed: Missing Request Size Validation in SMB2 Commands

Post Reply
Shane1145
Posts: 1624
Joined: Wed Sep 25, 2024 2:31 pm

Linux Kernel ksmbd Vulnerability Fixed: Missing Request Size Validation in SMB2 Commands

Post by Shane1145 »

In the Linux kernel, the following vulnerability has been resolved: ksmbd: validate command request size In commit 2b9b8f3b68ed ("ksmbd: validate command payload size"), except for SMB2_OPLOCK_BREAK_HE command, the request size of other commands is not checked, it's not expected. Fix it by add check for request size of other commands.


https://www.tenable.com/cve/CVE-2023-4515
Post Reply