In the Linux kernel, the following vulnerability has been resolved:
ksmbd: validate command request size
In commit 2b9b8f3b68ed ("ksmbd: validate command payload size"), except for SMB2OPLOCKBREAK_HE command, the request size of other commands is not checked, it's not expected. Fix it by add check for request size of other commands.
[
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5aa4fda5aa9c2a5a7bac67b4a12b089ab81fee3c",
"target": {
"file": "fs/smb/server/smb2misc.c",
"function": "ksmbd_smb2_check_message"
},
"id": "CVE-2023-4515-125a904e",
"signature_type": "Function",
"digest": {
"function_hash": "303848300943317807933966043347785226050",
"length": 1976.0
},
"deprecated": false,
"signature_version": "v1"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c6bef3bc30fd4a175aef846b7d928a6c40d091cd",
"target": {
"file": "fs/smb/server/smb2misc.c"
},
"id": "CVE-2023-4515-20e8c2f0",
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"256662829267576540291672052420005404121",
"282609724951256861571486618324613183560",
"177003789690225970487052203349303732357",
"152071319443125731386223441255871647632",
"297353322666573733094758399494186095693",
"134964233717743175133878930601982980934",
"105645720707650182215472716735204754444",
"108986822300617875835246044829284476306",
"174360814628146081934517537694157066517"
]
},
"deprecated": false,
"signature_version": "v1"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@595679098bdcdbfbba91ebe07a2f7f208df93870",
"target": {
"file": "fs/ksmbd/smb2misc.c",
"function": "ksmbd_smb2_check_message"
},
"id": "CVE-2023-4515-4b39247b",
"signature_type": "Function",
"digest": {
"function_hash": "303848300943317807933966043347785226050",
"length": 1976.0
},
"deprecated": false,
"signature_version": "v1"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5aa4fda5aa9c2a5a7bac67b4a12b089ab81fee3c",
"target": {
"file": "fs/smb/server/smb2misc.c"
},
"id": "CVE-2023-4515-73091cb1",
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"256662829267576540291672052420005404121",
"282609724951256861571486618324613183560",
"177003789690225970487052203349303732357",
"152071319443125731386223441255871647632",
"297353322666573733094758399494186095693",
"134964233717743175133878930601982980934",
"105645720707650182215472716735204754444",
"108986822300617875835246044829284476306",
"174360814628146081934517537694157066517"
]
},
"deprecated": false,
"signature_version": "v1"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c6bef3bc30fd4a175aef846b7d928a6c40d091cd",
"target": {
"file": "fs/smb/server/smb2misc.c",
"function": "ksmbd_smb2_check_message"
},
"id": "CVE-2023-4515-7b55d064",
"signature_type": "Function",
"digest": {
"function_hash": "303848300943317807933966043347785226050",
"length": 1976.0
},
"deprecated": false,
"signature_version": "v1"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ff7236b66d69582f90cf5616e63cfc3dc18142bb",
"target": {
"file": "fs/smb/server/smb2misc.c"
},
"id": "CVE-2023-4515-b3ec5bac",
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"256662829267576540291672052420005404121",
"282609724951256861571486618324613183560",
"177003789690225970487052203349303732357",
"152071319443125731386223441255871647632",
"297353322666573733094758399494186095693",
"134964233717743175133878930601982980934",
"105645720707650182215472716735204754444",
"108986822300617875835246044829284476306",
"174360814628146081934517537694157066517"
]
},
"deprecated": false,
"signature_version": "v1"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@595679098bdcdbfbba91ebe07a2f7f208df93870",
"target": {
"file": "fs/ksmbd/smb2misc.c"
},
"id": "CVE-2023-4515-c72b7146",
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"256662829267576540291672052420005404121",
"282609724951256861571486618324613183560",
"177003789690225970487052203349303732357",
"152071319443125731386223441255871647632",
"297353322666573733094758399494186095693",
"134964233717743175133878930601982980934",
"105645720707650182215472716735204754444",
"108986822300617875835246044829284476306",
"174360814628146081934517537694157066517"
]
},
"deprecated": false,
"signature_version": "v1"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ff7236b66d69582f90cf5616e63cfc3dc18142bb",
"target": {
"file": "fs/smb/server/smb2misc.c",
"function": "ksmbd_smb2_check_message"
},
"id": "CVE-2023-4515-d2923780",
"signature_type": "Function",
"digest": {
"function_hash": "303848300943317807933966043347785226050",
"length": 1976.0
},
"deprecated": false,
"signature_version": "v1"
}
]