CVE-2023-4515

In the Linux kernel, the following vulnerability has been resolved:

ksmbd: validate command request size

In commit 2b9b8f3b68ed ("ksmbd: validate command payload size"), except for SMB2_OPLOCK_BREAK_HE command, the request size of other commands is not checked, it's not expected. Fix it by add check for request size of other commands.

This vulnerability does not affect Red Hat Enterprise Linux as the in-kernel SMB server (ksmbd) is not enabled in supported Red Hat kernels. Red Hat Enterprise Linux utilizes the user-space Samba suite for SMB network file sharing rather than the kernel-based ksmbd implementation. Consequently, the vulnerable code is not present in supported Red Hat products.