PT-2023-7582 · Linux+9 · Linux Kernel+9

J51569436 · Published 2023-12-04 · Updated 2025-10-03 · CVE-2023-6606

Positive Technologies (AI Summary)

CVSS v3.1

7.1

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux Kernel (affected versions not specified)

Description An out-of-bounds read issue was found in the smbCalcSize() function in fs/smb/client/netmisc.c. This could allow a local attacker to crash the system or leak internal kernel information.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

DoS

Out of bounds Read

Buffer Overflow

Weakness Enumeration

CWE-125

CWE-119

Related Identifiers

ALSA-2024:0897

ALT-PU-2024-1317

ALT-PU-2025-12647

AZL-51470

BDU:2023-08638

CESA-2024_0881

CESA-2024_0897

CVE-2023-6606

DLA-3710-1

DLA-3841-1

OESA-2024-1008

OESA-2024-1009

OESA-2024-1010

OESA-2024-1032

OESA-2024-1033

OESA-2024-1034

OESA-2024-1035

OPENSUSE-SU-2024:13547-1

OPENSUSE-SU-2024:13704-1

OPENSUSE-SU-2024_0156-1

RHSA-2024:0723

RHSA-2024:0725

RHSA-2024:0881

RHSA-2024:0897

RHSA-2024:1188

RHSA-2024:1248

RHSA-2024:1404

RHSA-2024_0881

RHSA-2024_0897

RHSA-2024_1248

RXSA-2024:1248

SUSE-SU-2024:0110-1

SUSE-SU-2024:0112-1

SUSE-SU-2024:0113-1

SUSE-SU-2024:0115-1

SUSE-SU-2024:0117-1

SUSE-SU-2024:0118-1

SUSE-SU-2024:0120-1

SUSE-SU-2024:0129-1

SUSE-SU-2024:0141-1

SUSE-SU-2024:0153-1

SUSE-SU-2024:0154-1

SUSE-SU-2024:0156-1

SUSE-SU-2024:0160-1

SUSE-SU-2025:0834-1

SUSE-SU-2025_0834-1

USN-6602-1

USN-6603-1

USN-6604-1

USN-6604-2

USN-6605-1

USN-6605-2

USN-6606-1

USN-6607-1

USN-6608-1

USN-6608-2

USN-6609-1

USN-6609-2

USN-6609-3

USN-6628-1

USN-6628-2

USN-6635-1

Affected Products

Alt Linux

Almalinux

Astra Linux

Centos

Linux Kernel

Linuxmint

Red Hat

Red Os

Suse

Ubuntu

References · 676

• 🔥 https://bugzilla.redhat.com/show_bug.cgi?id=2253611 · Exploit
• 🔥 https://bugzilla.kernel.org/show_bug.cgi?id=218218 · Exploit
• https://osv.dev/vulnerability/USN-6605-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2024:0120-1 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-6628-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-46813 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2024-1032 · Vendor Advisory
• https://osv.dev/vulnerability/USN-6604-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2024:0153-1 · Vendor Advisory
• https://osv.dev/vulnerability/USN-6602-1 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2024-1034 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2024:0156-1 · Vendor Advisory
• https://bdu.fstec.ru/vul/2023-08638 · Security Note
• https://ubuntu.com/security/notices/USN-6609-2 · Vendor Advisory
• https://osv.dev/vulnerability/USN-6609-1 · Vendor Advisory