CVE-2023-4515

MediumCVSS 5.5/10Last modified Aug 4, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

ksmbd: validate command request size

In commit 2b9b8f3b68ed ("ksmbd: validate command payload size"), except for SMB2_OPLOCK_BREAK_HE command, the request size of other commands is not checked, it's not expected. Fix it by add check for request size of other commands.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected software

VendorProductVersions
LinuxLinux>= 35f450f54dca1519bb24faacd0428db09f89a11f, < 595679098bdcdbfbba91ebe07a2f7f208df93870; >= 9650cf70ec9d94ff34daa088b643229231723c26, < c6bef3bc30fd4a175aef846b7d928a6c40d091cd; >= 2b9b8f3b68edb3d67d79962f02e26dbb5ae3808d, < ff7236b66d69582f90cf5616e63cfc3dc18142bb; >= 2b9b8f3b68edb3d67d79962f02e26dbb5ae3808d, < 5aa4fda5aa9c2a5a7bac67b4a12b089ab81fee3c; 768caf4019f0391c0b6452afe34cea1704133f7b; >= 5.15.121, < 5.15.127; >= 6.1.36, < 6.1.46; >= 6.3.10, < 6.4
LinuxLinux6.4

References

Timeline

Published
Aug 16, 2025
Last modified
Aug 4, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-451504.3Nextcloud calendar is a calendar app for the Nextcloud server platform. Due to missing precondition checks the server was trying to validateCVE-2023-451518.8Nextcloud server is an open source home cloud platform. Affected versions of Nextcloud stored OAuth2 tokens in plaintext which allows an attCVE-2023-451522.3Engelsystem is a shift planning system for chaos events. A Blind SSRF in the "Import schedule" functionality makes it possible to perform a CVE-2023-451589.8An OS command injection vulnerability exists in web2py 2.24.1 and earlier. When the product is configured to use notifySendHandler for loggiCVE-2023-451598.41E Client installer can perform arbitrary file deletion on protected files.   A non-privileged user could provide a symbolic link or WindowCVE-2023-45167.8A CWE-306: Missing Authentication for Critical Function vulnerability exists in the IGSS Update Service that could allow a local attacker toCVE-2023-451608.8In the affected version of the 1E Client, an ordinary user could subvert downloaded instruction resource files, e.g., to substitute a harmfuCVE-2023-451617.2The 1E-Exchange-URLResponseTime instruction that is part of the Network product pack available on the 1E Exchange does not properly validateCVE-2023-451629.8Affected 1E Platform versions have a Blind SQL Injection vulnerability that can lead to arbitrary code execution.  Application of the relevCVE-2023-451637.2The 1E-Exchange-CommandLinePing instruction that is part of the Network product pack available on the 1E Exchange does not properly validateCVE-2023-451655.5IBM AIX 7.2 and 7.3 could allow a non-privileged local user to exploit a vulnerability in the AIX SMB client to cause a denial of service. CVE-2023-451667.8IBM AIX 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the piodmgrsu command to obtain elevate