QID 357314

an out-of-bounds access vulnerability involving netfilter was reported and fixed as: f1082dd31fe4 (netfilter: nf_tables: reject tables of unsupported family); while creating a new netfilter table, lack of a safeguard against invalid nf_tables family (pf) values within `nf_tables_newtable` function enables an attacker to achieve out-of-bounds access. (
( CVE-2023-6040) an out-of-bounds read vulnerability was found in smbcalcsize in fs/smb/client/netmisc.c in the linux kernel.
This issue could allow a local attacker to crash the system or leak internal kernel information. (
( CVE-2023-6606) a use-after-free vulnerability in the linux kernels netfilter: nf_tables component can be exploited to achieve local privilege escalation. the function nft_pipapo_walk did not skip inactive elements during set walk which could lead double deactivations of pipapo (pile packet policies) elements, leading to use-after-free. we recommend upgrading past commit 317eb9685095678f2c9f5a8189de698c5354316a. (
( CVE-2023-6817) a use-after-free vulnerability in the linux kernels ipv4: igmp component can be exploited to achieve local privilege escalation. a race condition can be exploited to cause a timer be mistakenly registered on a rcu read locked object which is freed by another thread. we recommend upgrading past commit e2b706c691905fe78468c361aaabc719d0a496f1. (
( CVE-2023-6932) an out-of-bounds memory read flaw was found in receive_encrypted_standard in fs/smb/client/smb2ops.c in the smb client sub-component in the linux kernel.
This issue occurs due to integer underflow on the memcpy length, leading to a denial of service. (
This flaw allows a local user to crash or potentially escalate their privileges on the system. (

Note: The preceding description block is extracted directly from the security advisory. Using automation, we have attempted to clean and format it as much as possible without introducing additional issues.

Successful exploitation of this vulnerability could lead to a securitybreach or could affect integrity, availability, and confidentiality.