CVE-2023-0881 — DDoS in Ubuntu package linux-bluefield

CVE-2023-0881

DDoS in Ubuntu package linux-bluefield PUBLISHED

Description (CNA)

Running DDoS on tcp port 22 will trigger a kernel crash. This issue is introduced by the backport of a commit regarding nft_lookup without the subsequent fixes that were introduced after this commit. The resolution of this CVE introduces those commits to the linux-bluefield package.

Affected (CNA)

Vendor / product	Versions
Ubuntu / Ubuntu package linux-bluefield	affected 5.4.0-1001.2 before 5.4.0-1058.64

CWE

CWE-20

References

https://bugs.launchpad.net/ubuntu/+source/linux-bluefield/+bug/2006397

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.