CVE-2023-2176

Name of the Vulnerable Software and Affected Versions Linux Kernel (affected versions not specified)

Description The issue is related to the Infiniband driver in the Linux Kernel, specifically with the compare netdev and ip function in the drivers/infiniband/core/cma.c module. It involves improper cleanup, resulting in an out-of-boundary read. A local user can exploit this to crash the system or escalate their privileges.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.