CVE-2023-35788

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.3.7

Description The issue is related to the fl set geneve opt() function in the net/sched/cls flower.c module of the Linux kernel's traffic control subsystem. It involves incorrect buffer boundary calculation during writing, which can be exploited by a remote attacker to cause a denial of service or potentially escalate privileges. The vulnerability can be triggered via TCA FLOWER KEY ENC OPTS GENEVE packets, affecting the flower classifier code and leading to an out-of-bounds write.

Recommendations For Linux kernel versions prior to 6.3.7, update to version 6.3.7 or later to resolve the issue. As a temporary workaround, consider restricting access to the fl set geneve opt() function or the TCA FLOWER KEY ENC OPTS GENEVE packets to minimize the risk of exploitation.