CVE:CVE-2023-35788
CNNVD:CNNVD-202306-1333
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。
Linux kernel 6.3.7之前版本存在安全漏洞，该漏洞源于net/sched/cls_flower.c中的fl_set_geneve_opt有问题，允许通过 TCA_FLOWER_KEY_ENC_OPTS_GENEVE 数据包越界写入代码，从而导致拒绝服务或权限升级。
solution:Upgrade linux linux_kernel to a higher version than 6.3.7,and avoid the version (,6.3.7); Upgrade debian debian_linux to a higher version than 12.0,and avoid the version 12.0; Upgrade netapp h300s_firmware to a higher version than -; Upgrade netapp h500s_firmware to a higher version than -; Upgrade netapp h700s_firmware to a higher version than -; Upgrade netapp h410s_firmware to a higher version than -; Upgrade netapp h410c_firmware to a higher version than -