CVE-2023-6606

HIGH

Linux Kernel - Info Disclosure

Title source: llm
STIX 2.1

Description

An out-of-bounds read vulnerability was found in smbCalcSize in fs/smb/client/netmisc.c in the Linux Kernel. This issue could allow a local attacker to crash the system or leak internal kernel information.

References (13)

Core 13
Core References
Third Party Advisory vendor-advisory x_refsource_redhat
https://access.redhat.com/errata/RHSA-2024:0723
Third Party Advisory vendor-advisory x_refsource_redhat
https://access.redhat.com/errata/RHSA-2024:0725
Third Party Advisory vendor-advisory x_refsource_redhat
https://access.redhat.com/errata/RHSA-2024:0881
Third Party Advisory vendor-advisory x_refsource_redhat
https://access.redhat.com/errata/RHSA-2024:0897
Third Party Advisory vendor-advisory x_refsource_redhat
https://access.redhat.com/errata/RHSA-2024:1188
Third Party Advisory vendor-advisory x_refsource_redhat
https://access.redhat.com/errata/RHSA-2024:1248
Third Party Advisory vendor-advisory x_refsource_redhat
https://access.redhat.com/errata/RHSA-2024:1404
Third Party Advisory vendor-advisory x_refsource_redhat
https://access.redhat.com/errata/RHSA-2024:2094
Third Party Advisory vdb-entry x_refsource_redhat
https://access.redhat.com/security/cve/CVE-2023-6606
Exploit, Issue Tracking issue-tracking x_refsource_redhat
https://bugzilla.redhat.com/show_bug.cgi?id=2253611

Scores

CVSS v3 7.1
EPSS 0.0001
EPSS Percentile 0.8%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

CISA SSVC

Vulnrichment
Exploitation poc
Automatable no
Technical Impact partial

Details

CWE
CWE-125
Status published
Products (11)
linux/linux_kernel 6.4 (5 CPE variants)
linux/linux_kernel 6.7 rc1 (6 CPE variants)
linux/linux_kernel 6.4.1 - 6.7
redhat/enterprise_linux 8.0
redhat/enterprise_linux 9.0
redhat/enterprise_linux_eus 9.2
redhat/enterprise_linux_eus 9.4
redhat/enterprise_linux_server_aus 9.2
redhat/enterprise_linux_server_aus 9.4
redhat/enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions 9.2
... and 1 more
Published Dec 08, 2023
Tracked Since Feb 18, 2026