Lucene search

K
f5F5F5:K000137791
HistoryDec 05, 2023 - 12:00 a.m.

K000137791 : Linux kernel vulnerability CVE-2023-35788

2023-12-0500:00:00
my.f5.com
16
linux kernel
vulnerability
fl_set_geneve_opt
out-of-bounds write
denial of service
privilege escalation

AI Score

7.2

Confidence

Low

EPSS

0.001

Percentile

28.7%

Security Advisory Description

An issue was discovered in fl_set_geneve_opt in net/sched/cls_flower.c in the Linux kernel before 6.3.7. It allows an out-of-bounds write in the flower classifier code via TCA_FLOWER_KEY_ENC_OPTS_GENEVE packets. This may result in denial of service or privilege escalation. (CVE-2023-35788)

Impact

There is no impact; F5 products are not affected by this vulnerability.