IP-DB.com
Türkçe English Deutsch Español
Entrar Obtener clave API
7.1Alta

CVE-2023-6606Kernel: out-of-bounds read vulnerability in smbcalcsize

Red Hat Red Hat Enterprise Linux 8; Red Hat Red Hat Enterprise Linux 8.6 Extended Update Support; Red Hat Red Hat Enterprise Linux 8.8 Extended Update Support;… Publicada: (hace 2 años)

Descripción

An out-of-bounds read vulnerability was found in smbCalcSize in fs/smb/client/netmisc.c in the Linux Kernel. This issue could allow a local attacker to crash the system or leak internal kernel information.

Debilidad (CWE): CWE-125

Datos: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Se publican tal como los indican las fuentes, en inglés.

Productos y versiones afectados

FabricanteProductoVersiones
enterprise linux 8 —
enterprise linux 9 —
linux linux kernel 6.4.1 – < 6.7
logging 5.8 —
redhat enterprise linux 8.0
redhat enterprise linux eus 9.2
redhat enterprise linux server aus 9.2
redhat enterprise linux server for power little endian update services for sap solutions 9.2
Red Hat Red Hat Enterprise Linux 6 —
Red Hat Red Hat Enterprise Linux 7 —
Red Hat Red Hat Enterprise Linux 8 all versions
Red Hat Red Hat Enterprise Linux 8.6 Extended Update Support all versions
Red Hat Red Hat Enterprise Linux 8.8 Extended Update Support all versions
Red Hat Red Hat Enterprise Linux 9 all versions
Red Hat Red Hat Enterprise Linux 9.2 Extended Update Support all versions
Red Hat Red Hat Virtualization 4 for Red Hat Enterprise Linux 8 all versions
Red Hat RHOL-5.8-RHEL-9 all versions
rhel eus 8.6 —
rhel eus 8.8 —
rhel eus 9.2 —
rhev hypervisor 4.4 —
Siemens RUGGEDCOM RST2428P —
Siemens SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family —
Siemens SCALANCE XCM-/XRM-/XCH-/XRH-300 family —
Siemens SIMATIC S7-1500 TM MFP - GNU/Linux subsystem < V1.1

Referencias y parches

Coincidencias CPE (NVD) (20)
  • cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* ≥ 6.4.1 < 6.7
  • cpe:2.3:o:linux:linux_kernel:6.4:-:*:*:*:*:*:*
  • cpe:2.3:o:linux:linux_kernel:6.4:rc4:*:*:*:*:*:*
  • cpe:2.3:o:linux:linux_kernel:6.4:rc5:*:*:*:*:*:*
  • cpe:2.3:o:linux:linux_kernel:6.4:rc6:*:*:*:*:*:*
  • cpe:2.3:o:linux:linux_kernel:6.4:rc7:*:*:*:*:*:*
  • cpe:2.3:o:linux:linux_kernel:6.7:rc1:*:*:*:*:*:*
  • cpe:2.3:o:linux:linux_kernel:6.7:rc2:*:*:*:*:*:*
  • cpe:2.3:o:linux:linux_kernel:6.7:rc3:*:*:*:*:*:*
  • cpe:2.3:o:linux:linux_kernel:6.7:rc4:*:*:*:*:*:*
  • cpe:2.3:o:linux:linux_kernel:6.7:rc5:*:*:*:*:*:*
  • cpe:2.3:o:linux:linux_kernel:6.7:rc6:*:*:*:*:*:*
  • cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*
  • cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:*
  • cpe:2.3:o:redhat:enterprise_linux_eus:9.2:*:*:*:*:*:*:*
  • cpe:2.3:o:redhat:enterprise_linux_eus:9.4:*:*:*:*:*:*:*
  • cpe:2.3:o:redhat:enterprise_linux_server_aus:9.2:*:*:*:*:*:*:*
  • cpe:2.3:o:redhat:enterprise_linux_server_aus:9.4:*:*:*:*:*:*:*
  • cpe:2.3:o:redhat:enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions:9.2:*:*:*:*:*:*:*
  • cpe:2.3:o:redhat:enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions:9.2_ppc64le:*:*:*:*:*:*:*

CVE recientes del mismo producto — Linux kernel

Sin puntuación
CVE-2026-99288

inet: reject unhashed sockets during established lookups

Linux Linux

In the Linux kernel, the following vulnerability has been resolved: inet: reject unhashed sockets during established lookups TCP established ehash lookups are lockless. The socket caches involved use SLAB_TYPESAFE_BY_RCU, so memory can be reused before an R…

Sin puntuación
CVE-2026-99286

xen-netback: Fix XenBus connection failure cleanup

Linux Linux

In the Linux kernel, the following vulnerability has been resolved: xen-netback: Fix XenBus connection failure cleanup xenvif_get_stats and xenvif_get_ethtool_stats capture vif->num_queues under rcu_read_lock. We need to unpublish vif->num_queues before syn…

Sin puntuación
CVE-2026-99285

netfilter: nft_byteorder: remove multi-register support

Linux Linux

In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_byteorder: remove multi-register support 64bit byteorder conversion is broken when several registers need to be converted because the source register array advances in steps …

Sin puntuación
CVE-2026-99284

net: skbuff: propagate shared-frag marker in skb_zerocopy()

Linux Linux

In the Linux kernel, the following vulnerability has been resolved: net: skbuff: propagate shared-frag marker in skb_zerocopy() skb_zerocopy() moves frag descriptors from @from into @to and takes a reference on each frag, but it does not copy skb_shinfo(fro…

Sin puntuación
CVE-2026-99279

ksmbd: reclaim ended sessions on logoff and expiration

Linux Linux

In the Linux kernel, the following vulnerability has been resolved: ksmbd: reclaim ended sessions on logoff and expiration LOGOFF and previous-session replacement leave sessions Expired with a zero credential expiry. Ended sessions can retain their memory a…