THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2023-3867 (CRITICAL 9.1) — In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix out of bounds read in smb2_sess_setup ksmbd does not consider the case of that smb2 session setup is in compound request. If this is the second payload of the compound, OOB read issue occurs while pr

[NVD] CVE-2023-3867 (CRITICAL 9.1) — In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix out of bounds read in smb2_sess_setup ksmbd does not consider the case of that smb2 session setup is in compound request. If this is the second payload of the compound, OOB read issue occurs while pr

lownvdPublished 2025-08-16

CVE-2023-3867 CVSS: 9.1 CRITICAL Published: 2025-08-16T14:15:27.510

In the Linux kernel, the following vulnerability has been resolved:

ksmbd: fix out of bounds read in smb2_sess_setup

ksmbd does not consider the case of that smb2 session setup is in compound request. If this is the second payload of the compound, OOB read issue occurs while processing the first payload in the smb2_sess_setup()

Indicators of compromise

CVE-2023-3867cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2023-3867