Linux kernel out-of-bounds read vulnerability (CNVD-2023-70078)

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. The Linux kernel suffers from an out-of-bounds read vulnerability that can be exploited by an attacker to cause a 4-byte out-of-bounds read of XFRMA_MTIMER_THRESH when parsing netlink attributes, resulting in the leakage of sensitive heap data into user space.