CVE-2023-4130

Name of the Vulnerable Software and Affected Versions Linux Kernel (affected versions not specified)

Description The Linux kernel contains a flaw within the ksmbd component related to incorrect length validation of extended attribute (ea) buffers during SMB2 file operation handling. Specifically, the issue resides in the

smb2 set ea()

function. Multiple

smb2 ea info

buffers are present in a

FILE FULL EA INFORMATION

request from a client. The ksmbd component uses the

NextEntryOffset

field to locate the next

smb2 ea info

entry. The validation process incorrectly uses the

next

variable instead of

buf len

to determine the buffer length before accessing the next extended attribute, potentially leading to a buffer overflow. The

next

variable represents the starting offset of the current extended attribute obtained from the previous one.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.