CVE-2023-4515

Source
https://cve.org/CVERecord?id=CVE-2023-4515
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-4515.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2023-4515
Downstream
BELL (1)
DEBIAN (1)
SUSE (11)
UBUNTU (1)
Related
Published
2025-08-16T13:25:50Z
Modified
2026-10-20T10:30:45Z
Severity
  • 9.1 (Critical) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H CVSS Calculator
Summary
ksmbd: validate command request size
Details

In the Linux kernel, the following vulnerability has been resolved:

ksmbd: validate command request size

In commit 2b9b8f3b68ed ("ksmbd: validate command payload size"), except for SMB2_OPLOCK_BREAK_HE command, the request size of other commands is not checked, it's not expected. Fix it by add check for request size of other commands.

Database specific
{
    "cna_assigner":  "Linux",
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/4xxx/CVE-2023-4515.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
35f450f54dca1519bb24faacd0428db09f89a11f
Fixed
595679098bdcdbfbba91ebe07a2f7f208df93870
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
9650cf70ec9d94ff34daa088b643229231723c26
Fixed
c6bef3bc30fd4a175aef846b7d928a6c40d091cd
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
2b9b8f3b68edb3d67d79962f02e26dbb5ae3808d
Fixed
ff7236b66d69582f90cf5616e63cfc3dc18142bb
Fixed
5aa4fda5aa9c2a5a7bac67b4a12b089ab81fee3c
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
5.15.121
Fixed
5.15.127
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
6.1.36
Fixed
6.1.46
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
6.3.10
Fixed
6.4
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
768caf4019f0391c0b6452afe34cea1704133f7b

Affected versions

v5.*
v5.15.121
v5.15.122
v5.15.123
v5.15.124
v5.15.125
v5.15.126
v6.*
v6.1.36
v6.1.37
v6.1.38
v6.1.39
v6.1.40
v6.1.41
v6.1.42
v6.1.43
v6.1.44
v6.1.45
v6.3.10
v6.3.11
v6.3.12
v6.3.13

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-4515.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
5.15.127
Type
ECOSYSTEM
Events
Introduced
5.16.0
Fixed
6.1.46
Type
ECOSYSTEM
Events
Introduced
6.2.0
Fixed
6.4.11

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-4515.json"