THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2023-4130 (HIGH 8.1) — In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix wrong next length validation of ea buffer in smb2_set_ea() There are multiple smb2_ea_info buffers in FILE_FULL_EA_INFORMATION request from client. ksmbd find next smb2_ea_info using ->NextEntryOffse

[NVD] CVE-2023-4130 (HIGH 8.1) — In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix wrong next length validation of ea buffer in smb2_set_ea() There are multiple smb2_ea_info buffers in FILE_FULL_EA_INFORMATION request from client. ksmbd find next smb2_ea_info using ->NextEntryOffse

lownvdPublished 2025-08-16

CVE-2023-4130 CVSS: 8.1 HIGH Published: 2025-08-16T14:15:27.640

In the Linux kernel, the following vulnerability has been resolved:

ksmbd: fix wrong next length validation of ea buffer in smb2_set_ea()

There are multiple smb2_ea_info buffers in FILE_FULL_EA_INFORMATION request from client. ksmbd find next smb2_ea_info using ->NextEntryOffset of current smb2_ea_info. ksmbd need to validate buffe

Indicators of compromise

CVE-2023-4130cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2023-4130