CVE-2023-4515

CVE-2023-4515

Critical · published August 16, 2025

CVSS v3.1
9.1
EPSS
0%
Percentile
22.8
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

ksmbd: validate command request size

In commit 2b9b8f3b68ed ("ksmbd: validate command payload size"), except

for SMB2_OPLOCK_BREAK_HE command, the request size of other commands

is not checked, it's not expected. Fix it by add check for request

size of other commands.

The record
Technical detail
CVSS v3.1
9.1 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00312 · 22.8th percentile
Published
2025-08-16T18:15Z
Affected products (10)
ProductVersionsFixed in
linux/linux_kernel≥ 5.15.121, < 5.15.1275.15.127
linux/linux_kernel≥ 6.1.36, < 6.1.466.1.46
linux/linux_kernel≥ 6.3.10, < 6.46.4
linux/linux_kernel≥ 6.4.1, < 6.4.116.4.11
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
References (4)
https://git.kernel.org/stable/c/595679098bdcdbfbba91ebe07a2f7f208df93870 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/5aa4fda5aa9c2a5a7bac67b4a12b089ab81fee3c · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/c6bef3bc30fd4a175aef846b7d928a6c40d091cd · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/ff7236b66d69582f90cf5616e63cfc3dc18142bb · 416baaa9-dc9f-4396-8d5f-8c081fb06d67
EPSS history
Timeline
  • 16 AUG 13:25Z
    ksmbd: validate command request size
    cvelistv5