Loading HuntDB...

CVE-2023-4130

UNKNOWN
Published 2025-08-16T13:27:58.227Z
Actions:

Expert Analysis

Professional remediation guidance

Get tailored security recommendations from our analyst team for CVE-2023-4130. We'll provide specific mitigation strategies based on your environment and risk profile.

No CVSS data available

Description

In the Linux kernel, the following vulnerability has been resolved:

ksmbd: fix wrong next length validation of ea buffer in smb2_set_ea()

There are multiple smb2_ea_info buffers in FILE_FULL_EA_INFORMATION request
from client. ksmbd find next smb2_ea_info using ->NextEntryOffset of
current smb2_ea_info. ksmbd need to validate buffer length Before
accessing the next ea. ksmbd should check buffer length using buf_len,
not next variable. next is the start offset of current ea that got from
previous ea.

Available Exploits

No exploits available for this CVE.

Related News

No news articles found for this CVE.

Affected Products

Social Media Intelligence

Real-time discussions and threat intelligence from social platforms

3 posts
Reddit 2 days, 8 hours ago
crstux

🔥 Top 10 Trending CVEs (16/09/2025) Here’s a quick breakdown of the 10 most interesting vulnerabilities trending today: **1. [CVE-2025-6202](https://nvd.nist.gov/vuln/detail/CVE-2025-6202)** - 📝 Vulnerability in SK Hynix DDR5 on x86 allows a local attacker to trigger Rowhammer bit flips impacting the Hardware Integrity and the systems security.This issue affects DDR5: DIMMs …

Reddit 3 days, 8 hours ago
crstux
Exploit

🔥 Top 10 Trending CVEs (15/09/2025) Here’s a quick breakdown of the 10 most interesting vulnerabilities trending today: **1. [CVE-2025-52915](https://nvd.nist.gov/vuln/detail/CVE-2025-52915)** - 📝 K7RKScan.sys 23.0.0.10, part of the K7 Security Anti-Malware suite, allows an admin-privileged user to send crafted IOCTL requests to terminate processes that are protected through a third-party implementation. …

2
2.0
View Original High Risk
Reddit 4 days, 3 hours ago
crstux
Exploit

🔥 Top 10 Trending CVEs (14/09/2025) Here’s a quick breakdown of the 10 most interesting vulnerabilities trending today: **1. [CVE-2023-52440](https://nvd.nist.gov/vuln/detail/CVE-2023-52440)** - 📝 In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix slub overflow in ksmbd_decode_ntlmssp_auth_blob() If authblob->SessionKey.Length is bigger than session key size(CIFS_KEY_SIZE), slub overflow can happen …

1
1.0
View Original High Risk

References

Published: 2025-08-16T13:27:58.227Z
Last Modified: 2025-08-16T13:27:58.227Z
Copied to clipboard!