CVEvulnerability

CVE-2023-6606

7.1 HIGH Published 2023-12-08 Modified 2026-10-14 Official page ↗
Status
Modified
Published
2023-12-08
Last modified
2026-10-14
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.1 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
CVSS 3.1 ([email protected])
7.1 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Weaknesses
CWE-125

Description

An out-of-bounds read vulnerability was found in smbCalcSize in fs/smb/client/netmisc.c in the Linux Kernel. This issue could allow a local attacker to crash the system or leak internal kernel information.

Affected configurations

• linux linux kernel (>= 6.4.1 < 6.7) • linux linux kernel 6.4 • linux linux kernel 6.7 • redhat enterprise linux 8.0 • redhat enterprise linux 9.0 • redhat enterprise linux eus 9.2 • redhat enterprise linux eus 9.4 • redhat enterprise linux server aus 9.2 • redhat enterprise linux server aus 9.4 • redhat enterprise linux server for power little endian update services for sap solutions 9.2 • redhat enterprise linux server for power little endian update services for sap solutions 9.2 ppc64le

Related

Weakness · CWE (1)

  • CWE-125 Out-of-bounds Read weakness

References