CVE-2023-6606: Linux Kernel

High severity, CVSS 7.1. EPSS: 0.5% chance of exploitation in the next 30 days.

An out-of-bounds read vulnerability was found in smbCalcSize in fs/smb/client/netmisc.c in the Linux Kernel. This issue could allow a local attacker to crash the system or leak internal kernel information.

Affected products

• Linux Linux Kernel: from 6.4.1, before 6.7 (fixed in 6.7); version 6.4 only; version 6.7 only
• Red Hat Enterprise Linux: version 8.0 only; version 9.0 only
• Red Hat Enterprise Linux Eus: version 9.2 only; version 9.4 only
• Red Hat Enterprise Linux Server Aus: version 9.2 only; version 9.4 only
• Red Hat Enterprise Linux Server For Power Little Endian Update Services For SAP Solutions: version 9.2 only; version 9.2_ppc64le only

Published 2023-12-08. Last modified 2026-06-17.