CVE-2023-35788
Published Jun 16, 2023
·Updated
An issue was discovered in fl_set_geneve_opt in net/sched/cls_flower.c in the Linux kernel before 6.3.7. It allows an out-of-bounds write in the flower classifier code via TCA_FLOWER_KEY_ENC_OPTS_GENEVE packets. This may result in denial of service or privilege escalation.
Affected Software
38 affected componentsFixes available
redhat/kernel<6.4
6.4
IBM QRadar SIEM<=7.5 - 7.5.0 UP7
Linux Linux kernel>=4.19<4.19.285
Linux Linux kernel>=4.20<5.4.246
Linux Linux kernel>=5.5<5.10.183
Linux Linux kernel>=5.11<5.15.116
Linux Linux kernel>=5.16<6.1.33
Linux Linux kernel>=6.2<6.3.7
Debian Debian Linux=12.0
All of the following
NetApp H300s
NetApp H300s Firmware
All of the following
NetApp H500s
NetApp H500s Firmware
All of the following
NetApp H700s
NetApp H700s Firmware
All of the following
NetApp H410s
NetApp H410s Firmware
All of the following
NetApp H410c
NetApp H410c Firmware
Canonical Ubuntu Linux=14.04
Canonical Ubuntu Linux=16.04
Canonical Ubuntu Linux=18.04
Canonical Ubuntu Linux=20.04
Canonical Ubuntu Linux=22.04
Debian Debian Linux=10.0
Debian Debian Linux=11.0
Linux Linux kernel<6.3.7
NetApp H300s Firmware
NetApp H300s
NetApp H500s Firmware
NetApp H500s
NetApp H700s Firmware
NetApp H700s
NetApp H410s Firmware
NetApp H410s
NetApp H410c Firmware
NetApp H410c
debian/linux
5.10.223-15.10.234-16.1.129-16.1.135-16.12.22-16.12.25-1
Remediation
Patch Available
Event History
Jun 16, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Jun 18, 2023
Data Sourced
via Red Hat·02:41 PM
DescriptionSeverityAffected Software
Jan 12, 2024
Data Sourced
via Launchpad·12:21 AM
Description
Apr 28, 2025
Data Sourced
via Ubuntu·02:13 PM
RemedyDescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2023-35788?
CVE-2023-35788 has a severity level that can lead to denial of service or privilege escalation.
2
How do I fix CVE-2023-35788?
To fix CVE-2023-35788, you should upgrade the Linux kernel to version 6.3.7 or later.
3
Which versions of the Linux kernel are affected by CVE-2023-35788?
CVE-2023-35788 affects the Linux kernel versions prior to 6.3.7, including various versions between 4.19 and 6.3.
4
Is CVE-2023-35788 relevant to IBM QRadar SIEM?
Yes, CVE-2023-35788 affects IBM QRadar SIEM versions up to 7.5.0 UP7.
5
What are the potential impacts of CVE-2023-35788?
CVE-2023-35788 can lead to out-of-bounds writes, resulting in potential denial of service or privilege escalation.