CVE-2023-39194 (published 2023-10-09T17:57:50.354Z)
A flaw was found in the XFRM subsystem in the Linux kernel. The specific flaw exists within the processing of state filters, which can result in a read past the end of an allocated buffer. This flaw allows a local privileged (CAP_NET_ADMIN) attacker to trigger an out-of-bounds read, potentially leading to an information disclosure.
Affected products: Vendor: n/a
Product: kernel
Versions: 6.5-rc7