{"id":"CVE-2023-6606","title":"An out-of-bounds read vulnerability was found in smbCalcSize in fs/smb/client/netmisc.c in the Linux Kernel","summary":"An out-of-bounds read vulnerability was found in smbCalcSize in fs/smb/client/netmisc.c in the Linux Kernel. This issue could allow a local attacker to crash the system or leak internal kernel information.","severity":"high","cvss":7.1,"cvssVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H","cwe":["CWE-125","CWE-125"],"vendor":"linux","product":"linux_kernel","affected":["linux_kernel >= 6.4.1, < 6.7","linux_kernel = 6.4","linux_kernel = 6.7","enterprise_linux = 8.0","enterprise_linux = 9.0","enterprise_linux_eus = 9.2","enterprise_linux_eus = 9.4","enterprise_linux_server_aus = 9.2","enterprise_linux_server_aus = 9.4","enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions = 9.2","enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions = 9.2_ppc64le"],"patched":["linux_kernel 6.7"],"published":"2023-12-08","updated":"2026-10-14","sourceUpdated":"2026-10-14T23:17:19.523","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2023-6606","references":[{"url":"https://access.redhat.com/errata/RHSA-2024:0723","label":"secalert@redhat.com"},{"url":"https://access.redhat.com/errata/RHSA-2024:0725","label":"secalert@redhat.com"},{"url":"https://access.redhat.com/errata/RHSA-2024:0881","label":"secalert@redhat.com"},{"url":"https://access.redhat.com/errata/RHSA-2024:0897","label":"secalert@redhat.com"},{"url":"https://access.redhat.com/errata/RHSA-2024:1188","label":"secalert@redhat.com"},{"url":"https://access.redhat.com/errata/RHSA-2024:1248","label":"secalert@redhat.com"},{"url":"https://access.redhat.com/errata/RHSA-2024:1404","label":"secalert@redhat.com"},{"url":"https://access.redhat.com/errata/RHSA-2024:2094","label":"secalert@redhat.com"},{"url":"https://access.redhat.com/security/cve/CVE-2023-6606","label":"secalert@redhat.com"},{"url":"https://bugzilla.kernel.org/show_bug.cgi?id=218218","label":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2253611","label":"secalert@redhat.com"},{"url":"https://access.redhat.com/errata/RHSA-2024:0723","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://access.redhat.com/errata/RHSA-2024:0725","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://access.redhat.com/errata/RHSA-2024:0881","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://access.redhat.com/errata/RHSA-2024:0897","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://access.redhat.com/errata/RHSA-2024:1188","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://access.redhat.com/errata/RHSA-2024:1248","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://access.redhat.com/errata/RHSA-2024:1404","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://access.redhat.com/errata/RHSA-2024:2094","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://access.redhat.com/security/cve/CVE-2023-6606","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.kernel.org/show_bug.cgi?id=218218","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2253611","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.debian.org/debian-lts-announce/2024/01/msg00004.html","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.debian.org/debian-lts-announce/2024/06/msg00016.html","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-613116.html","label":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-794697.html","label":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"}],"tags":["nvd"],"epss":0.00526,"epssPercentile":0.4318,"ingestedAt":"2026-10-15T00:02:07.134Z","slug":"CVE-2023-6606","body":"## Overview\n\nAn out-of-bounds read vulnerability was found in smbCalcSize in fs/smb/client/netmisc.c in the Linux Kernel. This issue could allow a local attacker to crash the system or leak internal kernel information.\n\n## Affected\n\n- `linux_kernel >= 6.4.1, < 6.7`\n- `linux_kernel = 6.4`\n- `linux_kernel = 6.7`\n- `enterprise_linux = 8.0`\n- `enterprise_linux = 9.0`\n- `enterprise_linux_eus = 9.2`\n- `enterprise_linux_eus = 9.4`\n- `enterprise_linux_server_aus = 9.2`\n- `enterprise_linux_server_aus = 9.4`\n- `enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions = 9.2`\n- `enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions = 9.2_ppc64le`\n\n## Remediation\n\nUpgrade past the affected range:\n\n- `linux_kernel 6.7`","depth":"twilight","depthScore":39,"depthScoreParts":{"impact":39.1,"likelihood":0.1,"exploitation":0,"ransomware":0},"changes":[]}