USN-6608-1: Linux kernel vulnerabilities

It was discovered that the CIFS network file system implementation in the
Linux kernel did not properly validate the server frame size in certain
situation, leading to an out-of-bounds read vulnerability. An attacker
could use this to construct a malicious CIFS image that, when operated on,
could cause a denial of service (system crash) or possibly expose sensitive
information. (CVE-2023-6606)

Xingyuan Mo discovered that the netfilter subsystem in the Linux kernel did
not properly handle inactive elements in its PIPAPO …

attacker cifs crash denial of service file file system image implementation kernel linux linux kernel linux kernel vulnerabilities malicious network out-of-bounds server service size system usn vulnerabilities vulnerability