CVE•Published 2025-08-16•Modified 2026-08-04•1 article on news•6 live references•NVD data
CVE-2023-3867Linux · Linux_kernel
Vulnerability data via NVD (ingested)
CVSS v3.1
9.1
CRITICAL
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
EPSS percentile
87
Exploit Prediction Scoring System · top 13% of all CVEs
Weaknesses (CWE)
Description
In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix out of bounds read in smb2_sess_setup ksmbd does not consider the case of that smb2 session setup is in compound request. If this is the second payload of the compound, OOB read issue occurs while processing the first payload in the smb2_sess_setup().
Timeline
Published 2025-08-16
Modified 2026-08-04
External references
Search for exposed instances
Shodan + Censys queries derived from NVD's CPE data. The vuln tag catches assets Shodan has explicitly linked to this CVE; the product / banner fingerprints find exposed instances even when the vuln tag was never applied (which is common).
Shodan · vuln tag0 hosts
vuln:CVE-2023-3867Hosts Shodan has explicitly fingerprinted as vulnerable.
Shodan · OS
os:"Linux Kernel"Hosts Shodan identified as running Linux Kernel.
More intel sources (5)
Shodan report
vuln:CVE-2023-3867Country / ASN / product breakdown for the vuln query.
Censys
vulnerabilities.cve_id: CVE-2023-3867Censys host search filtered to this CVE id.
grep.app
CVE-2023-3867Public source-code mentions — fast PoC discovery.
GitHub code
CVE-2023-3867GitHub code search for direct mentions.
Google dork
"CVE-2023-3867" exploit -site:nvd.nist.govWrite-ups and news, NVD excluded.