CVE-2023-3865CWE-125

CVE-2023-3865

High · published August 16, 2025

CVSS v3.1
8.1
EPSS
1%
Percentile
49.4
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

ksmbd: fix out-of-bound read in smb2_write

ksmbd_smb2_check_message doesn't validate hdr->NextCommand. If

->NextCommand is bigger than Offset + Length of smb2 write, It will

allow oversized smb2 write length. It will cause OOB read in smb2_write.

The record
Technical detail
CVSS v3.1
8.1 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00627 · 49.4th percentile
Weakness
CWE-125 · Out-of-bounds Read
Published
2025-08-16T18:15Z
Affected products (10)
ProductVersionsFixed in
linux/linux_kernel≥ 5.15, < 5.15.1215.15.121
linux/linux_kernel≥ 5.16, < 6.1.366.1.36
linux/linux_kernel≥ 6.2, < 6.3.106.3.10
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
References (4)
https://git.kernel.org/stable/c/3813eee5154d6a4c5875cb4444cb2b63bac8947f · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/58a9c41064df27632e780c5a3ae3e0e4284957d1 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/5fe7f7b78290638806211046a99f031ff26164e1 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/c86211159bc3178b891e0d60e586a32c7b6a231b · 416baaa9-dc9f-4396-8d5f-8c081fb06d67
EPSS history
Timeline
  • 16 AUG 13:27Z
    ksmbd: fix out-of-bound read in smb2_write
    cvelistv5