NetSight
IP …
high7.8

CVE-2023-35788

An issue was discovered in fl_set_geneve_opt in net/sched/cls_flower.c in the Linux kernel before 6.3.7.

Impact

An issue was discovered in fl_set_geneve_opt in net/sched/cls_flower.c in the Linux kernel before 6.3.7. It allows an out-of-bounds write in the flower classifier code via TCA_FLOWER_KEY_ENC_OPTS_GENEVE packets. This may result in denial of service or privilege escalation.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 4.19 before 4.19.285
from 4.20 before 5.4.246
from 5.5 before 5.10.183
from 5.11 before 5.15.116
from 5.16 before 6.1.33
from 6.2 before 6.3.7
DebianDebian Linux
Versions 12.0, 10.0, 11.0
NetappH300s Firmware
All versions
NetappH500s Firmware
All versions
NetappH700s Firmware
All versions
NetappH410s Firmware
All versions
NetappH410c Firmware
All versions
CanonicalUbuntu Linux
Versions 14.04, 16.04, 18.04, 20.04, 22.04

Weakness classification

CWE-787

References