CVE-2023-6610CWE-125

CVE-2023-6610

High · published December 8, 2023

CVSS v3.1
7.1
EPSS
0%
Percentile
36.2
In the wild
Unconfirmed
What it is

An out-of-bounds read vulnerability was found in smb2_dump_detail in fs/smb/client/smb2ops.c in the Linux Kernel. This issue could allow a local attacker to crash the system or leak internal kernel information.

The record
Technical detail
CVSS v3.1
7.1 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00430 · 36.2th percentile
Weakness
CWE-125 · Out-of-bounds Read
Published
2023-12-08T22:15Z
Affected products (3)
ProductVersionsFixed in
linux/linux_kernelall versions—
redhat/enterprise_linuxall versions—
redhat/enterprise_linuxall versions—
References (23)
https://access.redhat.com/errata/RHSA-2024:0723 · [email protected]https://access.redhat.com/errata/RHSA-2024:0724 · [email protected]https://access.redhat.com/errata/RHSA-2024:0725 · [email protected]https://access.redhat.com/errata/RHSA-2024:0881 · [email protected]https://access.redhat.com/errata/RHSA-2024:0897 · [email protected]https://access.redhat.com/errata/RHSA-2024:1248 · [email protected]https://access.redhat.com/errata/RHSA-2024:1404 · [email protected]https://access.redhat.com/errata/RHSA-2024:2094 · [email protected]https://access.redhat.com/security/cve/CVE-2023-6610 · [email protected]https://bugzilla.kernel.org/show_bug.cgi?id=218219 · [email protected]https://bugzilla.redhat.com/show_bug.cgi?id=2253614 · [email protected]https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=567320c46a60a3c39b69aa1df802d753817a3f86 · [email protected]https://access.redhat.com/errata/RHSA-2024:0723 · af854a3a-2127-422b-91ae-364da2661108https://access.redhat.com/errata/RHSA-2024:0724 · af854a3a-2127-422b-91ae-364da2661108https://access.redhat.com/errata/RHSA-2024:0725 · af854a3a-2127-422b-91ae-364da2661108https://access.redhat.com/errata/RHSA-2024:0881 · af854a3a-2127-422b-91ae-364da2661108https://access.redhat.com/errata/RHSA-2024:0897 · af854a3a-2127-422b-91ae-364da2661108https://access.redhat.com/errata/RHSA-2024:1248 · af854a3a-2127-422b-91ae-364da2661108https://access.redhat.com/errata/RHSA-2024:1404 · af854a3a-2127-422b-91ae-364da2661108https://access.redhat.com/errata/RHSA-2024:2094 · af854a3a-2127-422b-91ae-364da2661108https://access.redhat.com/security/cve/CVE-2023-6610 · af854a3a-2127-422b-91ae-364da2661108https://bugzilla.kernel.org/show_bug.cgi?id=218219 · af854a3a-2127-422b-91ae-364da2661108https://bugzilla.redhat.com/show_bug.cgi?id=2253614 · af854a3a-2127-422b-91ae-364da2661108
EPSS history
Timeline
  • 08 DEC 16:58Z
    Kernel: oob access in smb2_dump_detail
    cvelistv5