CVE-2023-4130: ksmbd: fix wrong next length validation of ea buffer in smb2_set_ea()
In the Linux kernel, the following vulnerability has been resolved:
ksmbd: fix wrong next length validation of ea buffer in smb2setea()
There are multiple smb2eainfo buffers in FILEFULLEAINFORMATION request from client. ksmbd find next smb2eainfo using ->NextEntryOffset of current smb2eainfo. ksmbd need to validate buffer length Before accessing the next ea. ksmbd should check buffer length using buflen, not next variable. next is the start offset of current ea that got from previous ea.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-4130?
The severity of CVE-2023-4130 is classified as moderate.
How do I fix CVE-2023-4130?
To fix CVE-2023-4130, update the Linux kernel to the latest patched version.
What is the impact of CVE-2023-4130?
CVE-2023-4130 can lead to improper validation of information during file operations, potentially allowing for denial of service.
Which versions of the Linux kernel are affected by CVE-2023-4130?
CVE-2023-4130 affects various versions of the Linux kernel that include the ksmbd component.
Is CVE-2023-4130 actively being exploited?
As of now, there are no known active exploits for CVE-2023-4130.