Kernel Crash Vulnerability in Linux-Bluefield Product by Ubuntu

CVE-2023-0881

What is CVE-2023-0881?

A vulnerability has been identified in the Linux-Bluefield package, which can lead to a kernel crash when DDoS attacks target TCP port 22. This issue stems from the incorporation of a commit related to nft_lookup, lacking the necessary follow-up fixes introduced post-commit. The problematic backport increases the risk of service disruption, emphasizing the importance of timely updates to mitigate potential threats.

References