In the Linux kernel, the following vulnerability has been resolved:
ksmbd: validate command request size
In commit 2b9b8f3b68ed ("ksmbd: validate command payload size"), except for SMB2OPLOCKBREAK_HE command, the request size of other commands is not checked, it's not expected. Fix it by add check for request size of other commands.
{ "vanir_signatures": [ { "signature_type": "Function", "target": { "file": "fs/smb/server/smb2misc.c", "function": "ksmbd_smb2_check_message" }, "signature_version": "v1", "digest": { "length": 1976.0, "function_hash": "303848300943317807933966043347785226050" }, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5aa4fda5aa9c2a5a7bac67b4a12b089ab81fee3c", "deprecated": false, "id": "CVE-2023-4515-125a904e" }, { "signature_type": "Line", "target": { "file": "fs/smb/server/smb2misc.c" }, "signature_version": "v1", "digest": { "threshold": 0.9, "line_hashes": [ "256662829267576540291672052420005404121", "282609724951256861571486618324613183560", "177003789690225970487052203349303732357", "152071319443125731386223441255871647632", "297353322666573733094758399494186095693", "134964233717743175133878930601982980934", "105645720707650182215472716735204754444", "108986822300617875835246044829284476306", "174360814628146081934517537694157066517" ] }, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c6bef3bc30fd4a175aef846b7d928a6c40d091cd", "deprecated": false, "id": "CVE-2023-4515-20e8c2f0" }, { "signature_type": "Function", "target": { "file": "fs/ksmbd/smb2misc.c", "function": "ksmbd_smb2_check_message" }, "signature_version": "v1", "digest": { "length": 1976.0, "function_hash": "303848300943317807933966043347785226050" }, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@595679098bdcdbfbba91ebe07a2f7f208df93870", "deprecated": false, "id": "CVE-2023-4515-4b39247b" }, { "signature_type": "Line", "target": { "file": "fs/smb/server/smb2misc.c" }, "signature_version": "v1", "digest": { "threshold": 0.9, "line_hashes": [ "256662829267576540291672052420005404121", "282609724951256861571486618324613183560", "177003789690225970487052203349303732357", "152071319443125731386223441255871647632", "297353322666573733094758399494186095693", "134964233717743175133878930601982980934", "105645720707650182215472716735204754444", "108986822300617875835246044829284476306", "174360814628146081934517537694157066517" ] }, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5aa4fda5aa9c2a5a7bac67b4a12b089ab81fee3c", "deprecated": false, "id": "CVE-2023-4515-73091cb1" }, { "signature_type": "Function", "target": { "file": "fs/smb/server/smb2misc.c", "function": "ksmbd_smb2_check_message" }, "signature_version": "v1", "digest": { "length": 1976.0, "function_hash": "303848300943317807933966043347785226050" }, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c6bef3bc30fd4a175aef846b7d928a6c40d091cd", "deprecated": false, "id": "CVE-2023-4515-7b55d064" }, { "signature_type": "Line", "target": { "file": "fs/smb/server/smb2misc.c" }, "signature_version": "v1", "digest": { "threshold": 0.9, "line_hashes": [ "256662829267576540291672052420005404121", "282609724951256861571486618324613183560", "177003789690225970487052203349303732357", "152071319443125731386223441255871647632", "297353322666573733094758399494186095693", "134964233717743175133878930601982980934", "105645720707650182215472716735204754444", "108986822300617875835246044829284476306", "174360814628146081934517537694157066517" ] }, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ff7236b66d69582f90cf5616e63cfc3dc18142bb", "deprecated": false, "id": "CVE-2023-4515-b3ec5bac" }, { "signature_type": "Line", "target": { "file": "fs/ksmbd/smb2misc.c" }, "signature_version": "v1", "digest": { "threshold": 0.9, "line_hashes": [ "256662829267576540291672052420005404121", "282609724951256861571486618324613183560", "177003789690225970487052203349303732357", "152071319443125731386223441255871647632", "297353322666573733094758399494186095693", "134964233717743175133878930601982980934", "105645720707650182215472716735204754444", "108986822300617875835246044829284476306", "174360814628146081934517537694157066517" ] }, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@595679098bdcdbfbba91ebe07a2f7f208df93870", "deprecated": false, "id": "CVE-2023-4515-c72b7146" }, { "signature_type": "Function", "target": { "file": "fs/smb/server/smb2misc.c", "function": "ksmbd_smb2_check_message" }, "signature_version": "v1", "digest": { "length": 1976.0, "function_hash": "303848300943317807933966043347785226050" }, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ff7236b66d69582f90cf5616e63cfc3dc18142bb", "deprecated": false, "id": "CVE-2023-4515-d2923780" } ] }