CVE-2023-6606

2023-12-0800:00:00

ubuntu.com

linux kernel

smbcalcsize

out-of-bounds read

vulnerability

local attacker

system crash

internal kernel information

bugzilla

7.1 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

7 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

JSON

An out-of-bounds read vulnerability was found in smbCalcSize in
fs/smb/client/netmisc.c in the Linux Kernel. This issue could allow a local
attacker to crash the system or leak internal kernel information.

Bugs

OSVersionArchitecturePackageVersionFilename
ubuntu18.04noarchlinux< 4.15.0-221.232UNKNOWN
ubuntu20.04noarchlinux< 5.4.0-170.188UNKNOWN
ubuntu22.04noarchlinux< 5.15.0-92.102UNKNOWN
ubuntu23.10noarchlinux< 6.5.0-15.15UNKNOWN
ubuntu16.04noarchlinux< 4.4.0-250.284UNKNOWN
ubuntu18.04noarchlinux-aws< 4.15.0-1164.177UNKNOWN
ubuntu20.04noarchlinux-aws< 5.4.0-1117.127UNKNOWN
ubuntu22.04noarchlinux-aws< 5.15.0-1052.57UNKNOWN
ubuntu23.10noarchlinux-aws< 6.5.0-1012.12UNKNOWN
ubuntu14.04noarchlinux-aws< 4.4.0-1127.133UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	18.04	noarch	linux	< 4.15.0-221.232	UNKNOWN
ubuntu	20.04	noarch	linux	< 5.4.0-170.188	UNKNOWN
ubuntu	22.04	noarch	linux	< 5.15.0-92.102	UNKNOWN
ubuntu	23.10	noarch	linux	< 6.5.0-15.15	UNKNOWN
ubuntu	16.04	noarch	linux	< 4.4.0-250.284	UNKNOWN
ubuntu	18.04	noarch	linux-aws	< 4.15.0-1164.177	UNKNOWN
ubuntu	20.04	noarch	linux-aws	< 5.4.0-1117.127	UNKNOWN
ubuntu	22.04	noarch	linux-aws	< 5.15.0-1052.57	UNKNOWN
ubuntu	23.10	noarch	linux-aws	< 6.5.0-1012.12	UNKNOWN
ubuntu	14.04	noarch	linux-aws	< 4.4.0-1127.133	UNKNOWN