CVE-2023-6606: Kernel: out-of-bounds read vulnerability in smbcalcsize

Q: What is the vulnerability ID for this kernel vulnerability?

The vulnerability ID for this kernel vulnerability is CVE-2023-6606.

Q: What is the title of this vulnerability?

The title of this vulnerability is 'Kernel: out-of-bounds read vulnerability in smbcalcsize'.

Q: What is the severity of CVE-2023-6606?

The severity of CVE-2023-6606 is high, with a CVSS score of 7.1.

Q: Where can I find more information about this vulnerability?

You can find more information about this vulnerability at the following references: [Red Hat Security Advisory](https://access.redhat.com/security/cve/CVE-2023-6606), [Kernel Bugzilla](https://bugzilla.kernel.org/show_bug.cgi?id=218218), [Red Hat Bugzilla](https://bugzilla.redhat.com/show_bug.cgi?id=2253611).

Q: How can this vulnerability impact my system?

This vulnerability can allow a local attacker to crash the system or leak internal kernel information.

Published Dec 8, 2023

Updated

An Out-Of-Bounds Read vulnerability in smbCalcSize in fs/smb/client/netmisc.c in the Linux Kernel. This flaw could allow a local attacker to crash the system or leak internal kernel information.

Refer; https://bugzilla.kernel.org/showbug.cgi?id=218218

[1] Retrieve WordCount and add offset2 to the data part of smb [2] Retrieve a 16-byte value from the calculated pointer

c unsigned int smbCalcSize(void buf) { struct smbhdr ptr = buf; return (sizeof(struct smbhdr) + (2 ptr->WordCount) + 2 / size of the bcc field / + getbcc(ptr)); } ... static inline u16 getbcc(struct smbhdr hdr) { le16 bcptr = (le16 )BCC(hdr);

return getunalignedle16(bcptr);//[2] } ... static inline void BCC(struct smbhdr smb) { return (void )smb + sizeof(smb) + 2 smb->WordCount; //[1] }

[2] cifsdemultiplexthread → standardreceive3 → cifshandlestandard → checkSMB → smbCalcSize

c int checkSMB(char buf, unsigned int totalread, struct TCPServerInfo server) { struct smbhdr smb = (struct smbhdr )buf; u32 rfclen = be32tocpu(smb->smbbuflength); u32 clclen; / calculated length / cifsdbg(FYI, "checkSMB Length: 0x%x, smbbuflength: 0x%x\n", totalread, rfclen);

/ is this frame too small to even get to a BCC? / if (totalread < 2 + sizeof(struct smbhdr)) { ... }

/ otherwise, there is enough to get to the BCC / if (checksmbhdr(smb)) return -EIO; clclen = smbCalcSize(smb);

Other sources

An out-of-bounds read vulnerability was found in smbCalcSize in fs/smb/client/netmisc.c in the Linux Kernel. This issue could allow a local attacker to crash the system or leak internal kernel information.

— Launchpad

Kernel: out-of-bounds read vulnerability in smbcalcsize

— Microsoft

Linux Kernel is vulnerable to a denial of service, caused by an out-of-bounds read flaw in the smbCalcSize function in fs/smb/client/netmisc.c. By sending a specially crafted request, a local authenticated attacker could exploit this vulnerability to crash the system or obtain internal kernel information.

— IBM

Affected Software

190 affected componentsFixes available

IBM Security Verify Governance, Identity Manager software component<=ISVG 10.0.2

IBM Security Verify Governance, Identity Manager virtual appliance component<=ISVG 10.0.2

Linux Linux kernel>=6.4.1<6.7

Linux Linux kernel=6.4

Linux Linux kernel=6.4-rc4

Linux Linux kernel=6.4-rc5

Linux Linux kernel=6.4-rc6

Linux Linux kernel=6.4-rc7

Linux Linux kernel=6.7-rc1

Linux Linux kernel=6.7-rc2

Linux Linux kernel=6.7-rc3

Linux Linux kernel=6.7-rc4

Linux Linux kernel=6.7-rc5

Linux Linux kernel=6.7-rc6

redhat Enterprise Linux=8.0

redhat Enterprise Linux=9.0

redhat Enterprise Linux Eus=9.2

redhat Enterprise Linux Eus=9.4

redhat Enterprise Linux Server Aus=9.2

redhat Enterprise Linux Server Aus=9.4

redhat Enterprise Linux Server For Power Little Endian Update Services For Sap Solutions=9.2

redhat Enterprise Linux Server For Power Little Endian Update Services For Sap Solutions=9.2_ppc64le

debian/linux<6.1.76-1

6.1.76-1

debian/linux<6.6.9-1

6.6.9-1

debian/linux<6.6.9-1

6.6.9-1

ubuntu/linux-aws<4.4.0-1127.133

4.4.0-1127.133

ubuntu/linux-azure<4.15.0-1173.188~14.04.1

4.15.0-1173.188~14.04.1

ubuntu/linux-lts-xenial<4.4.0-250.284~14.04.1

4.4.0-250.284~14.04.1

ubuntu/linux*

ubuntu/linux<4.4.0-250.284

4.4.0-250.284

ubuntu/linux-aws<4.4.0-1165.180

4.4.0-1165.180

ubuntu/linux-aws-hwe<4.15.0-1164.177~16.04.1

4.15.0-1164.177~16.04.1

ubuntu/linux-azure<4.15.0-1173.188~16.04.1

4.15.0-1173.188~16.04.1

ubuntu/linux-gcp<4.15.0-1158.175~16.04.1

4.15.0-1158.175~16.04.1

ubuntu/linux-hwe<4.15.0-221.232~16.04.1

4.15.0-221.232~16.04.1

ubuntu/linux-kvm<4.4.0-1128.138

4.4.0-1128.138

ubuntu/linux-oracle<4.15.0-1127.138~16.04.1

4.15.0-1127.138~16.04.1

ubuntu/linux-hwe-edge*

ubuntu/linux-fips<4.4.0-1097.104

4.4.0-1097.104

ubuntu/linux-fips*

ubuntu/linux<4.15.0-221.232

4.15.0-221.232

ubuntu/linux-aws<4.15.0-1164.177

4.15.0-1164.177

ubuntu/linux-aws-5.0*

ubuntu/linux-aws-5.3*

ubuntu/linux-aws-5.4<5.4.0-1117.127~18.04.1

5.4.0-1117.127~18.04.1

ubuntu/linux-azure*

ubuntu/linux-azure-4.15<4.15.0-1173.188

4.15.0-1173.188

ubuntu/linux-azure-5.3*

ubuntu/linux-azure-5.4<5.4.0-1122.129~18.04.1

5.4.0-1122.129~18.04.1

ubuntu/linux-azure-edge*

ubuntu/linux-gcp*

ubuntu/linux-gcp-4.15<4.15.0-1158.175

4.15.0-1158.175

ubuntu/linux-gcp-5.3*

ubuntu/linux-gcp-5.4<5.4.0-1121.130~18.04.1

5.4.0-1121.130~18.04.1

ubuntu/linux-gke-4.15*

ubuntu/linux-gke-5.4*

ubuntu/linux-gkeop-5.4*

ubuntu/linux-hwe*

ubuntu/linux-hwe-5.4<5.4.0-170.188~18.04.1

5.4.0-170.188~18.04.1

ubuntu/linux-hwe-edge*

ubuntu/linux-ibm-5.4<5.4.0-1064.69~18.04.1

5.4.0-1064.69~18.04.1

ubuntu/linux-kvm<4.15.0-1148.153

4.15.0-1148.153

ubuntu/linux-oem*

ubuntu/linux-oracle<4.15.0-1127.138

4.15.0-1127.138

ubuntu/linux-oracle-5.0*

ubuntu/linux-oracle-5.3*

ubuntu/linux-oracle-5.4<5.4.0-1116.125~18.04.1

5.4.0-1116.125~18.04.1

ubuntu/linux-raspi-5.4<5.4.0-1101.113~18.04.1

5.4.0-1101.113~18.04.1

ubuntu/linux-aws-fips<4.15.0-2103.109

4.15.0-2103.109

ubuntu/linux-azure-fips<4.15.0-2082.88

4.15.0-2082.88

ubuntu/linux-fips<4.15.0-1119.130

4.15.0-1119.130

ubuntu/linux-gcp-fips<4.15.0-2066.71

4.15.0-2066.71

ubuntu/linux-aws-fips*

ubuntu/linux-azure-fips*

ubuntu/linux-fips*

ubuntu/linux-gcp-fips*

ubuntu/linux<5.4.0-170.188

5.4.0-170.188

ubuntu/linux-aws<5.4.0-1117.127

5.4.0-1117.127

ubuntu/linux-aws-5.15<5.15.0-1052.57~20.04.1

5.15.0-1052.57~20.04.1

ubuntu/linux-azure<5.4.0-1122.129

5.4.0-1122.129

ubuntu/linux-azure-5.15<5.15.0-1054.62~20.04.1

5.15.0-1054.62~20.04.1

ubuntu/linux-bluefield<5.4.0-1077.83

5.4.0-1077.83

ubuntu/linux-gcp<5.4.0-1121.130

5.4.0-1121.130

ubuntu/linux-gcp-5.15<5.15.0-1049.57~20.04.1

5.15.0-1049.57~20.04.1

ubuntu/linux-gkeop<5.4.0-1084.88

5.4.0-1084.88

ubuntu/linux-gkeop-5.15<5.15.0-1035.41~20.04.1

5.15.0-1035.41~20.04.1

ubuntu/linux-hwe-5.15<5.15.0-92.102~20.04.1

5.15.0-92.102~20.04.1

ubuntu/linux-ibm<5.4.0-1064.69

5.4.0-1064.69

ubuntu/linux-ibm-5.15<5.15.0-1045.48~20.04.1

5.15.0-1045.48~20.04.1

ubuntu/linux-intel-iotg-5.15<5.15.0-1048.54~20.04.1

5.15.0-1048.54~20.04.1

ubuntu/linux-iot<5.4.0-1029.30

5.4.0-1029.30

ubuntu/linux-kvm<5.4.0-1105.112

5.4.0-1105.112

ubuntu/linux-lowlatency-hwe-5.15<5.15.0-92.102~20.04.1

5.15.0-92.102~20.04.1

ubuntu/linux-nvidia-tegra-5.15<5.15.0-1022.22~20.04.1

5.15.0-1022.22~20.04.1

ubuntu/linux-oracle<5.4.0-1116.125

5.4.0-1116.125

ubuntu/linux-oracle-5.15<5.15.0-1050.56~20.04.1

5.15.0-1050.56~20.04.1

ubuntu/linux-raspi<5.4.0-1101.113

5.4.0-1101.113

ubuntu/linux-riscv-5.15<5.15.0-1048.52~20.04.1

5.15.0-1048.52~20.04.1

ubuntu/linux-xilinx-zynqmp<5.4.0-1036.40

5.4.0-1036.40

ubuntu/linux-aws-5.11*

ubuntu/linux-aws-5.13*

ubuntu/linux-aws-5.8*

ubuntu/linux-azure-5.11*

ubuntu/linux-azure-5.13*

ubuntu/linux-azure-5.8*

ubuntu/linux-azure-fde*

ubuntu/linux-gcp-5.11*

ubuntu/linux-gcp-5.13*

ubuntu/linux-gcp-5.8*

ubuntu/linux-gke*

ubuntu/linux-gke-5.15*

ubuntu/linux-hwe-5.11*

ubuntu/linux-hwe-5.13*

ubuntu/linux-hwe-5.8*

ubuntu/linux-intel-5.13*

ubuntu/linux-oem-5.10*

ubuntu/linux-oem-5.13*

ubuntu/linux-oem-5.6*

ubuntu/linux-oracle-5.11*

ubuntu/linux-oracle-5.13*

ubuntu/linux-oracle-5.8*

ubuntu/linux-raspi2*

ubuntu/linux-riscv*

ubuntu/linux-riscv-5.11*

ubuntu/linux-riscv-5.8*

ubuntu/linux-aws-fips<5.4.0-1117.127+fips1

5.4.0-1117.127+fips1

ubuntu/linux-azure-fips<5.4.0-1122.129+fips1

5.4.0-1122.129+fips1

ubuntu/linux-fips<5.4.0-1091.101

5.4.0-1091.101

ubuntu/linux-gcp-fips<5.4.0-1121.130+fips1

5.4.0-1121.130+fips1

ubuntu/linux-aws-fips*

ubuntu/linux-azure-fips*

ubuntu/linux-fips*

ubuntu/linux-gcp-fips*

ubuntu/linux<5.15.0-92.102

5.15.0-92.102

ubuntu/linux-allwinner-5.19*

ubuntu/linux-aws<5.15.0-1052.57

5.15.0-1052.57

ubuntu/linux-aws-5.19*

ubuntu/linux-aws-6.2<6.2.0-1018.18~22.04.1

6.2.0-1018.18~22.04.1

ubuntu/linux-aws-6.5*

ubuntu/linux-azure<5.15.0-1054.62

5.15.0-1054.62

ubuntu/linux-azure-5.19*

ubuntu/linux-azure-6.2<6.2.0-1019.19~22.04.1

6.2.0-1019.19~22.04.1

ubuntu/linux-azure-6.5*

ubuntu/linux-azure-fde<5.15.0-1054.62.1

5.15.0-1054.62.1

ubuntu/linux-azure-fde-5.19*

ubuntu/linux-azure-fde-6.2<6.2.0-1019.19~22.04.1.1

6.2.0-1019.19~22.04.1.1

ubuntu/linux-gcp<5.15.0-1049.57

5.15.0-1049.57

ubuntu/linux-gcp-5.19*

ubuntu/linux-gcp-6.2<6.2.0-1021.23~22.04.1

6.2.0-1021.23~22.04.1

ubuntu/linux-gcp-6.5*

ubuntu/linux-gke<5.15.0-1049.54

5.15.0-1049.54

ubuntu/linux-gkeop<5.15.0-1035.41

5.15.0-1035.41

ubuntu/linux-hwe-5.19*

ubuntu/linux-hwe-6.2*

ubuntu/linux-hwe-6.5<6.5.0-15.15~22.04.1

6.5.0-15.15~22.04.1

ubuntu/linux-ibm<5.15.0-1045.48

5.15.0-1045.48

ubuntu/linux-intel-iotg<5.15.0-1047.53

5.15.0-1047.53

ubuntu/linux-kvm<5.15.0-1049.54

5.15.0-1049.54

ubuntu/linux-lowlatency<5.15.0-92.102

5.15.0-92.102

ubuntu/linux-lowlatency-hwe-5.19*

ubuntu/linux-lowlatency-hwe-6.2*

ubuntu/linux-lowlatency-hwe-6.5<6.5.0-15.15.1.1~22.04.1

6.5.0-15.15.1.1~22.04.1

ubuntu/linux-nvidia<5.15.0-1043.43

5.15.0-1043.43

ubuntu/linux-nvidia-6.2<6.2.0-1015.15

6.2.0-1015.15

ubuntu/linux-nvidia-6.5<6.5.0-1014.14

6.5.0-1014.14

ubuntu/linux-nvidia-tegra<5.15.0-1021.21

5.15.0-1021.21

ubuntu/linux-nvidia-tegra-igx<5.15.0-1008.8

5.15.0-1008.8

ubuntu/linux-oem-5.17*

ubuntu/linux-oem-6.0*

ubuntu/linux-oem-6.1<6.1.0-1029.29

6.1.0-1029.29

ubuntu/linux-oem-6.5<6.5.0-1013.14

6.5.0-1013.14

ubuntu/linux-oracle<5.15.0-1050.56

5.15.0-1050.56

ubuntu/linux-oracle-6.5*

ubuntu/linux-raspi<5.15.0-1045.48

5.15.0-1045.48

ubuntu/linux-realtime*

ubuntu/linux-riscv*

ubuntu/linux-riscv-5.19*

ubuntu/linux-starfive-5.19*

ubuntu/linux-starfive-6.2*

ubuntu/linux-xilinx-zynqmp<5.15.0-1027.31

5.15.0-1027.31

ubuntu/linux-bluefield<5.15.0-1033.35

5.15.0-1033.35

ubuntu/linux-intel-iot-realtime<5.15.0-1046.48

5.15.0-1046.48

ubuntu/linux-realtime<5.15.0-1053.59

5.15.0-1053.59

ubuntu/linux-aws-fips*

ubuntu/linux-azure-fips*

ubuntu/linux-fips*

ubuntu/linux-gcp-fips*

ubuntu/linux-gcp-fips<5.15.0-1055.63+fips2

5.15.0-1055.63+fips2

ubuntu/linux-raspi-realtime*

debian/linux

6.1.176-16.1.190-16.12.107-16.12.115-27.2.15-1

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade debian/linux to a version that resolves this vulnerability.
Fixed in 6.1.76-1
Upgrade
Upgrade debian/linux to a version that resolves this vulnerability.
Fixed in 6.6.9-1
Upgrade
Upgrade ubuntu/linux-aws to a version that resolves this vulnerability.
Fixed in 4.4.0-1127.133
Upgrade
Upgrade ubuntu/linux-azure to a version that resolves this vulnerability.
Fixed in 4.15.0-1173.188~14.04.1
Upgrade
Upgrade ubuntu/linux-lts-xenial to a version that resolves this vulnerability.
Fixed in 4.4.0-250.284~14.04.1
Upgrade
Upgrade ubuntu/linux to a version that resolves this vulnerability.
Fixed in 4.4.0-250.284
Upgrade
Upgrade ubuntu/linux-aws to a version that resolves this vulnerability.
Fixed in 4.4.0-1165.180
Upgrade
Upgrade ubuntu/linux-aws-hwe to a version that resolves this vulnerability.
Fixed in 4.15.0-1164.177~16.04.1
Upgrade
Upgrade ubuntu/linux-azure to a version that resolves this vulnerability.
Fixed in 4.15.0-1173.188~16.04.1
Upgrade
Upgrade ubuntu/linux-gcp to a version that resolves this vulnerability.
Fixed in 4.15.0-1158.175~16.04.1
Upgrade
Upgrade ubuntu/linux-hwe to a version that resolves this vulnerability.
Fixed in 4.15.0-221.232~16.04.1
Upgrade
Upgrade ubuntu/linux-kvm to a version that resolves this vulnerability.
Fixed in 4.4.0-1128.138
Upgrade
Upgrade ubuntu/linux-oracle to a version that resolves this vulnerability.
Fixed in 4.15.0-1127.138~16.04.1
Upgrade
Upgrade ubuntu/linux-fips to a version that resolves this vulnerability.
Fixed in 4.4.0-1097.104
Upgrade
Upgrade ubuntu/linux to a version that resolves this vulnerability.
Fixed in 4.15.0-221.232
Upgrade
Upgrade ubuntu/linux-aws to a version that resolves this vulnerability.
Fixed in 4.15.0-1164.177
Upgrade
Upgrade ubuntu/linux-aws-5.4 to a version that resolves this vulnerability.
Fixed in 5.4.0-1117.127~18.04.1
Upgrade
Upgrade ubuntu/linux-azure-4.15 to a version that resolves this vulnerability.
Fixed in 4.15.0-1173.188
Upgrade
Upgrade ubuntu/linux-azure-5.4 to a version that resolves this vulnerability.
Fixed in 5.4.0-1122.129~18.04.1
Upgrade
Upgrade ubuntu/linux-gcp-4.15 to a version that resolves this vulnerability.
Fixed in 4.15.0-1158.175
Upgrade
Upgrade ubuntu/linux-gcp-5.4 to a version that resolves this vulnerability.
Fixed in 5.4.0-1121.130~18.04.1
Upgrade
Upgrade ubuntu/linux-hwe-5.4 to a version that resolves this vulnerability.
Fixed in 5.4.0-170.188~18.04.1
Upgrade
Upgrade ubuntu/linux-ibm-5.4 to a version that resolves this vulnerability.
Fixed in 5.4.0-1064.69~18.04.1
Upgrade
Upgrade ubuntu/linux-kvm to a version that resolves this vulnerability.
Fixed in 4.15.0-1148.153
Upgrade
Upgrade ubuntu/linux-oracle to a version that resolves this vulnerability.
Fixed in 4.15.0-1127.138
Upgrade
Upgrade ubuntu/linux-oracle-5.4 to a version that resolves this vulnerability.
Fixed in 5.4.0-1116.125~18.04.1
Upgrade
Upgrade ubuntu/linux-raspi-5.4 to a version that resolves this vulnerability.
Fixed in 5.4.0-1101.113~18.04.1
Upgrade
Upgrade ubuntu/linux-aws-fips to a version that resolves this vulnerability.
Fixed in 4.15.0-2103.109
Upgrade
Upgrade ubuntu/linux-azure-fips to a version that resolves this vulnerability.
Fixed in 4.15.0-2082.88
Upgrade
Upgrade ubuntu/linux-fips to a version that resolves this vulnerability.
Fixed in 4.15.0-1119.130
Upgrade
Upgrade ubuntu/linux-gcp-fips to a version that resolves this vulnerability.
Fixed in 4.15.0-2066.71
Upgrade
Upgrade ubuntu/linux to a version that resolves this vulnerability.
Fixed in 5.4.0-170.188
Upgrade
Upgrade ubuntu/linux-aws to a version that resolves this vulnerability.
Fixed in 5.4.0-1117.127
Upgrade
Upgrade ubuntu/linux-aws-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1052.57~20.04.1
Upgrade
Upgrade ubuntu/linux-azure to a version that resolves this vulnerability.
Fixed in 5.4.0-1122.129
Upgrade
Upgrade ubuntu/linux-azure-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1054.62~20.04.1
Upgrade
Upgrade ubuntu/linux-bluefield to a version that resolves this vulnerability.
Fixed in 5.4.0-1077.83
Upgrade
Upgrade ubuntu/linux-gcp to a version that resolves this vulnerability.
Fixed in 5.4.0-1121.130
Upgrade
Upgrade ubuntu/linux-gcp-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1049.57~20.04.1
Upgrade
Upgrade ubuntu/linux-gkeop to a version that resolves this vulnerability.
Fixed in 5.4.0-1084.88
Upgrade
Upgrade ubuntu/linux-gkeop-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1035.41~20.04.1
Upgrade
Upgrade ubuntu/linux-hwe-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-92.102~20.04.1
Upgrade
Upgrade ubuntu/linux-ibm to a version that resolves this vulnerability.
Fixed in 5.4.0-1064.69
Upgrade
Upgrade ubuntu/linux-ibm-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1045.48~20.04.1
Upgrade
Upgrade ubuntu/linux-intel-iotg-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1048.54~20.04.1
Upgrade
Upgrade ubuntu/linux-iot to a version that resolves this vulnerability.
Fixed in 5.4.0-1029.30
Upgrade
Upgrade ubuntu/linux-kvm to a version that resolves this vulnerability.
Fixed in 5.4.0-1105.112
Upgrade
Upgrade ubuntu/linux-lowlatency-hwe-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-92.102~20.04.1
Upgrade
Upgrade ubuntu/linux-nvidia-tegra-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1022.22~20.04.1
Upgrade
Upgrade ubuntu/linux-oracle to a version that resolves this vulnerability.
Fixed in 5.4.0-1116.125
Upgrade
Upgrade ubuntu/linux-oracle-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1050.56~20.04.1
Upgrade
Upgrade ubuntu/linux-raspi to a version that resolves this vulnerability.
Fixed in 5.4.0-1101.113
Upgrade
Upgrade ubuntu/linux-riscv-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1048.52~20.04.1
Upgrade
Upgrade ubuntu/linux-xilinx-zynqmp to a version that resolves this vulnerability.
Fixed in 5.4.0-1036.40
Upgrade
Upgrade ubuntu/linux-aws-fips to a version that resolves this vulnerability.
Fixed in 5.4.0-1117.127+fips1
Upgrade
Upgrade ubuntu/linux-azure-fips to a version that resolves this vulnerability.
Fixed in 5.4.0-1122.129+fips1
Upgrade
Upgrade ubuntu/linux-fips to a version that resolves this vulnerability.
Fixed in 5.4.0-1091.101
Upgrade
Upgrade ubuntu/linux-gcp-fips to a version that resolves this vulnerability.
Fixed in 5.4.0-1121.130+fips1
Upgrade
Upgrade ubuntu/linux to a version that resolves this vulnerability.
Fixed in 5.15.0-92.102
Upgrade
Upgrade ubuntu/linux-aws to a version that resolves this vulnerability.
Fixed in 5.15.0-1052.57
Upgrade
Upgrade ubuntu/linux-aws-6.2 to a version that resolves this vulnerability.
Fixed in 6.2.0-1018.18~22.04.1
Upgrade
Upgrade ubuntu/linux-azure to a version that resolves this vulnerability.
Fixed in 5.15.0-1054.62
Upgrade
Upgrade ubuntu/linux-azure-6.2 to a version that resolves this vulnerability.
Fixed in 6.2.0-1019.19~22.04.1
Upgrade
Upgrade ubuntu/linux-azure-fde to a version that resolves this vulnerability.
Fixed in 5.15.0-1054.62.1
Upgrade
Upgrade ubuntu/linux-azure-fde-6.2 to a version that resolves this vulnerability.
Fixed in 6.2.0-1019.19~22.04.1.1
Upgrade
Upgrade ubuntu/linux-gcp to a version that resolves this vulnerability.
Fixed in 5.15.0-1049.57
Upgrade
Upgrade ubuntu/linux-gcp-6.2 to a version that resolves this vulnerability.
Fixed in 6.2.0-1021.23~22.04.1
Upgrade
Upgrade ubuntu/linux-gke to a version that resolves this vulnerability.
Fixed in 5.15.0-1049.54
Upgrade
Upgrade ubuntu/linux-gkeop to a version that resolves this vulnerability.
Fixed in 5.15.0-1035.41
Upgrade
Upgrade ubuntu/linux-hwe-6.5 to a version that resolves this vulnerability.
Fixed in 6.5.0-15.15~22.04.1
Upgrade
Upgrade ubuntu/linux-ibm to a version that resolves this vulnerability.
Fixed in 5.15.0-1045.48
Upgrade
Upgrade ubuntu/linux-intel-iotg to a version that resolves this vulnerability.
Fixed in 5.15.0-1047.53
Upgrade
Upgrade ubuntu/linux-kvm to a version that resolves this vulnerability.
Fixed in 5.15.0-1049.54
Upgrade
Upgrade ubuntu/linux-lowlatency to a version that resolves this vulnerability.
Fixed in 5.15.0-92.102
Upgrade
Upgrade ubuntu/linux-lowlatency-hwe-6.5 to a version that resolves this vulnerability.
Fixed in 6.5.0-15.15.1.1~22.04.1
Upgrade
Upgrade ubuntu/linux-nvidia to a version that resolves this vulnerability.
Fixed in 5.15.0-1043.43
Upgrade
Upgrade ubuntu/linux-nvidia-6.2 to a version that resolves this vulnerability.
Fixed in 6.2.0-1015.15
Upgrade
Upgrade ubuntu/linux-nvidia-6.5 to a version that resolves this vulnerability.
Fixed in 6.5.0-1014.14
Upgrade
Upgrade ubuntu/linux-nvidia-tegra to a version that resolves this vulnerability.
Fixed in 5.15.0-1021.21
Upgrade
Upgrade ubuntu/linux-nvidia-tegra-igx to a version that resolves this vulnerability.
Fixed in 5.15.0-1008.8
Upgrade
Upgrade ubuntu/linux-oem-6.1 to a version that resolves this vulnerability.
Fixed in 6.1.0-1029.29
Upgrade
Upgrade ubuntu/linux-oem-6.5 to a version that resolves this vulnerability.
Fixed in 6.5.0-1013.14
Upgrade
Upgrade ubuntu/linux-oracle to a version that resolves this vulnerability.
Fixed in 5.15.0-1050.56
Upgrade
Upgrade ubuntu/linux-raspi to a version that resolves this vulnerability.
Fixed in 5.15.0-1045.48
Upgrade
Upgrade ubuntu/linux-xilinx-zynqmp to a version that resolves this vulnerability.
Fixed in 5.15.0-1027.31
Upgrade
Upgrade ubuntu/linux-bluefield to a version that resolves this vulnerability.
Fixed in 5.15.0-1033.35
Upgrade
Upgrade ubuntu/linux-intel-iot-realtime to a version that resolves this vulnerability.
Fixed in 5.15.0-1046.48
Upgrade
Upgrade ubuntu/linux-realtime to a version that resolves this vulnerability.
Fixed in 5.15.0-1053.59
Upgrade
Upgrade ubuntu/linux-gcp-fips to a version that resolves this vulnerability.
Fixed in 5.15.0-1055.63+fips2
Upgrade
Upgrade debian/linux to a version that resolves this vulnerability.
Fixed in 6.1.176-1Fixed in 6.1.190-1Fixed in 6.12.107-1Fixed in 6.12.115-2Fixed in 7.2.15-1

Event History

Dec 8, 2023

Data Sourced

via Red Hat·07:47 AM

DescriptionSeverityAffected Software

CVE Published

via MITRE·04:58 PM

Data Sourced

via MITRE·04:58 PM

DescriptionSeverityWeakness

Data Sourced

via OSV·05:15 PM

DescriptionSeverityAffected Software

Data Sourced

via NVD·05:15 PM

DescriptionSeverityWeaknessAffected Software

Dec 11, 2023

Exploit Published

via CISA·09:20 PM

Sep 4, 2025

Data Sourced

via Microsoft·02:34 AM

DescriptionSeverityWeakness

Parent advisories

This vulnerability appears in the following advisories.

IBM-7172423

Peer vulnerabilities

Found alongside the following vulnerabilities.

Frequently Asked Questions

What is the vulnerability ID for this kernel vulnerability?

The vulnerability ID for this kernel vulnerability is CVE-2023-6606.

What is the title of this vulnerability?

The title of this vulnerability is 'Kernel: out-of-bounds read vulnerability in smbcalcsize'.

What is the severity of CVE-2023-6606?

The severity of CVE-2023-6606 is high, with a CVSS score of 7.1.

Where can I find more information about this vulnerability?

You can find more information about this vulnerability at the following references: [Red Hat Security Advisory](https://access.redhat.com/security/cve/CVE-2023-6606), [Kernel Bugzilla](https://bugzilla.kernel.org/show_bug.cgi?id=218218), [Red Hat Bugzilla](https://bugzilla.redhat.com/show_bug.cgi?id=2253611).

How can this vulnerability impact my system?

This vulnerability can allow a local attacker to crash the system or leak internal kernel information.

CVE-2023-6606: Kernel: out-of-bounds read vulnerability in smbcalcsize

Other sources

Affected Software

Remediation

Event History

Parent advisories

Peer vulnerabilities

Frequently Asked Questions

What is the vulnerability ID for this kernel vulnerability?

What is the title of this vulnerability?

What is the severity of CVE-2023-6606?

Where can I find more information about this vulnerability?

How can this vulnerability impact my system?

Company

Resources

Contact