CVE-2023-3866CWE-476

CVE-2023-3866

High · published August 16, 2025

CVSS v3.1
7.5
EPSS
12%
Percentile
96.2
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

ksmbd: validate session id and tree id in the compound request

This patch validate session id and tree id in compound request.

If first operation in the compound is SMB2 ECHO request, ksmbd bypass

session and tree validation. So work->sess and work->tcon could be NULL.

If secound request in the compound access work->sess or tcon, It cause

NULL pointer dereferecing error.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.12473 · 96.2th percentile
Weakness
CWE-476 · NULL Pointer Dereference
Published
2025-08-16T18:15Z
Affected products (10)
ProductVersionsFixed in
linux/linux_kernel≥ 5.15, < 5.15.1215.15.121
linux/linux_kernel≥ 5.16, < 6.1.366.1.36
linux/linux_kernel≥ 6.2, < 6.3.106.3.10
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
References (4)
https://git.kernel.org/stable/c/5005bcb4219156f1bf7587b185080ec1da08518e · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/854156d12caa9d36de1cf5f084591c7686cc8a9d · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/d1066c1b3663401cd23c0d6e60cdae750ce00c0f · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/eb947403518ea3d93f6d89264bb1f5416bb0c7d0 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67
EPSS history
Timeline
  • 16 AUG 13:27Z
    ksmbd: validate session id and tree id in the compound request
    cvelistv5