CVE-2023-0881CWE-20

DDoS in Ubuntu package linux-bluefield

High · published March 31, 2025

CVSS v3.1
7.5
EPSS
0%
Percentile
36.7
In the wild
Unconfirmed
What it is

Running DDoS on tcp port 22 will trigger a kernel crash. This issue is introduced by the backport of a commit regarding nft_lookup without the subsequent fixes that were introduced after this commit. The resolution of this CVE introduces those commits to the linux-bluefield package.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00434 · 36.7th percentile
Weakness
CWE-20 · Improper Input Validation
Published
2025-03-31T13:28Z
EPSS history
Timeline
  • 31 MAR 13:28Z
    DDoS in Ubuntu package linux-bluefield
    cvelistv5