CVE-2023-35788

CVSS v3.1 7.8 (High)

EPSS 0.05 % (20^th)

Affected Products 13

Advisories 52

NVD Status Analyzed

An issue was discovered in fl_set_geneve_opt in net/sched/cls_flower.c in the Linux kernel before 6.3.7. It allows an out-of-bounds write in the flower classifier code via TCA_FLOWER_KEY_ENC_OPTS_GENEVE packets. This may result in denial of service or privilege escalation.

Weaknesses

CWE-787: Out-of-bounds Write

CVE Status: PUBLISHED
NVD Status: Analyzed
CNA: MITRE
Published Date: 2023-06-16 21:15:09
(15 months ago)
Updated Date: 2024-06-26 15:55:02
(2 months ago)

Affected Products

Netapp

Configuration #1

	CPE23	From	Up To
Linux Kernel from 4.19 version and prior 4.19.285 version	cpe:2.3:o:linux:linux_kernel	>= 4.19	< 4.19.285
Linux Kernel from 4.20 version and prior 5.4.246 version	cpe:2.3:o:linux:linux_kernel	>= 4.20	< 5.4.246
Linux Kernel from 5.5 version and prior 5.10.183 version	cpe:2.3:o:linux:linux_kernel	>= 5.5	< 5.10.183
Linux Kernel from 5.11 version and prior 5.15.116 version	cpe:2.3:o:linux:linux_kernel	>= 5.11	< 5.15.116
Linux Kernel from 5.16 version and prior 6.1.33 version	cpe:2.3:o:linux:linux_kernel	>= 5.16	< 6.1.33
Linux Kernel from 6.2 version and prior 6.3.7 version	cpe:2.3:o:linux:linux_kernel	>= 6.2	< 6.3.7

Configuration #2

		CPE23	From	Up To
	Debian Linux 12.0	cpe:2.3:o:debian:debian_linux:12.0

Configuration #3

AND

		CPE23
OR
	Netapp H300s	cpe:2.3:h:netapp:h300s:-
OR
	Running on/with
	Netapp H300s Firmware	cpe:2.3:o:netapp:h300s_firmware:-

Configuration #4

AND

		CPE23
OR
	Netapp H500s	cpe:2.3:h:netapp:h500s:-
OR
	Running on/with
	Netapp H500s Firmware	cpe:2.3:o:netapp:h500s_firmware:-

Configuration #5

AND

		CPE23
OR
	Netapp H700s	cpe:2.3:h:netapp:h700s:-
OR
	Running on/with
	Netapp H700s Firmware	cpe:2.3:o:netapp:h700s_firmware:-

Configuration #6

AND

		CPE23
OR
	Netapp H410s	cpe:2.3:h:netapp:h410s:-
OR
	Running on/with
	Netapp H410s Firmware	cpe:2.3:o:netapp:h410s_firmware:-

Configuration #7

AND

		CPE23
OR
	Netapp H410c	cpe:2.3:h:netapp:h410c:-
OR
	Running on/with
	Netapp H410c Firmware	cpe:2.3:o:netapp:h410c_firmware:-

Configuration #8

		CPE23	From	Up To
	Canonical Ubuntu Linux 14.04	cpe:2.3:o:canonical:ubuntu_linux:14.04:::*:esm
	Canonical Ubuntu Linux 16.04	cpe:2.3:o:canonical:ubuntu_linux:16.04:::*:esm
	Canonical Ubuntu Linux 18.04	cpe:2.3:o:canonical:ubuntu_linux:18.04:::*:lts
	Canonical Ubuntu Linux 20.04	cpe:2.3:o:canonical:ubuntu_linux:20.04:::*:lts
	Canonical Ubuntu Linux 22.04	cpe:2.3:o:canonical:ubuntu_linux:22.04:::*:lts

Configuration #9

		CPE23	From	Up To
	Debian Linux 10.0	cpe:2.3:o:debian:debian_linux:10.0
	Debian Linux 11.0	cpe:2.3:o:debian:debian_linux:11.0