CVE-2023-3865

HighCVSS 7.1/10Last modified Aug 15, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

ksmbd: fix out-of-bound read in smb2_write

ksmbd_smb2_check_message doesn't validate hdr->NextCommand. If ->NextCommand is bigger than Offset + Length of smb2 write, It will allow oversized smb2 write length. It will cause OOB read in smb2_write.

Metrics

CVSS 3.1 7.1/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

Weakness enumeration

CWE-125

Affected software

Vendor	Product	Versions
Linux	Linux	>= e2f34481b24db2fd634b5edb0a5bd0e4d38cc6e9, < 3813eee5154d6a4c5875cb4444cb2b63bac8947f; >= e2f34481b24db2fd634b5edb0a5bd0e4d38cc6e9, < c86211159bc3178b891e0d60e586a32c7b6a231b; >= e2f34481b24db2fd634b5edb0a5bd0e4d38cc6e9, < 58a9c41064df27632e780c5a3ae3e0e4284957d1; >= e2f34481b24db2fd634b5edb0a5bd0e4d38cc6e9, < 5fe7f7b78290638806211046a99f031ff26164e1
Linux	Linux	5.15

References

Timeline

Published: Aug 16, 2025
Last modified: Aug 15, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-386507.8Multiple integer overflow vulnerabilities exist in the VZT vzt_rd_block_vch_decode times parsing functionality of GTKWave 3.3.115. A special CVE-2023-386517.8Multiple integer overflow vulnerabilities exist in the VZT vzt_rd_block_vch_decode times parsing functionality of GTKWave 3.3.115. A special CVE-2023-386527.8Multiple integer overflow vulnerabilities exist in the VZT vzt_rd_block_vch_decode dict parsing functionality of GTKWave 3.3.115. A speciall CVE-2023-386537.8Multiple integer overflow vulnerabilities exist in the VZT vzt_rd_block_vch_decode dict parsing functionality of GTKWave 3.3.115. A speciall CVE-2023-386548.2Improper input validation for some some Intel(R) PROSet/Wireless WiFi software for Windows before version 23.20 may allow an unauthenticated CVE-2023-386556.8Improper buffer restrictions in firmware for some Intel(R) AMT and Intel(R) Standard Manageability may allow a privileged user to potentiall CVE-2023-386577.8An out-of-bounds write vulnerability exists in the LXT2 zlib block decompression functionality of GTKWave 3.3.115. A specially crafted .lxt2 CVE-2023-38665.5In the Linux kernel, the following vulnerability has been resolved: ksmbd: validate session id and tree id in the compound request This pa CVE-2023-386655.5Null pointer dereference in ieee_write_file in nasm 2.16rc0 allows attackers to cause a denial of service (crash).CVE-2023-386665.5Bento4 v1.6.0-639 was discovered to contain a segmentation violation via the AP4_Processor::ProcessFragments function in mp4encrypt.CVE-2023-386675.5Stack-based buffer over-read in function disasm in nasm 2.16 allows attackers to cause a denial of service.CVE-2023-386685.5Stack-based buffer over-read in disasm in nasm 2.16 allows attackers to cause a denial of service (crash).