Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2023-0881

DDoS in Ubuntu package linux-bluefield

Description

Running DDoS on tcp port 22 will trigger a kernel crash. This issue is introduced by the backport of a commit regarding nft_lookup without the subsequent fixes that were introduced after this commit. The resolution of this CVE introduces those commits to the linux-bluefield package.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Ubuntu Ubuntu package linux-bluefield

Default version status: unaffected

  • 5.4.0-1001.2 to < 5.4.0-1058.64affected

References