CVE-2023-0881

Running DDoS on tcp port 22 will trigger a kernel crash. This issue is introduced by the backport of a commit regarding nft_lookup without the subsequent fixes that were introduced after this commit. The resolution of this CVE introduces those commits to the linux-bluefield package.

Score

CVSS 3.1 7.5 High

Status

Analyzed - security@ubuntu.com

Published

2025-03-31

Last modified

2025-03-31

Weaknesses

CWE-1333, CWE-20

Affected products

• Linux-bluefield (Canonical)
• Ubuntu Package Linux-bluefield (Ubuntu)

References

• https://bugs.launchpad.net/ubuntu/+source/linux-bluefield/+bug/2006397