AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2023-3867

CRITICAL · CVSS 9.1 EPSS 3.13%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2025-08-16 · Last synced 2026-08-04

CyberRota Analysis

This is a critical severity vulnerability with a CVSS score of 9.1. It affects Linux.

CVE
CVE-2023-3867
Severity
CRITICAL
CVSS
9.1
EPSS
3.13%
Linux

Original NVD Description

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix out of bounds read in smb2_sess_setup ksmbd does not consider the case of that smb2 session setup is in compound request. If this is the second payload of the compound, OOB read issue occurs while processing the first payload in the smb2_sess_setup().

Related CVEs

Other vulnerabilities affecting the same vendor(s)