Reference page — cumulative record through Sunday, October 4, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.

CVE-2023-6610

CVE-2023-6610HIGH

Linux kernel — Kernel: oob access in smb2_dump_detail

  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   L   L   L   N  U  H  N  H    7.1   .0043   35.0     —

AFFECTED
  Product                                                  Versions     Fixed
  kernel                                                   unspecified  —
  Red Hat Enterprise Linux 8                               unspecified  0:4.18.0-513.18.1.rt7.320.el8_9
  Red Hat Enterprise Linux 8                               unspecified  0:4.18.0-513.18.1.el8_9
  Red Hat Enterprise Linux 8.6 Extended Update Support     unspecified  0:4.18.0-372.91.1.el8_6
  Red Hat Enterprise Linux 8.8 Extended Update Support     unspecified  0:4.18.0-477.51.1.el8_8
  Red Hat Enterprise Linux 9                               unspecified  0:5.14.0-362.24.1.el9_3
  Red Hat Enterprise Linux 9                               unspecified  0:5.14.0-362.24.1.el9_3
  Red Hat Enterprise Linux 9.2 Extended Update Support     unspecified  0:5.14.0-284.52.1.el9_2
  Red Hat Enterprise Linux 9.2 Extended Update Support     unspecified  0:5.14.0-284.52.1.rt14.337.el9_2
  Red Hat Virtualization 4 for Red Hat Enterprise Linux 8  unspecified  0:4.18.0-372.91.1.el8_6
  + 21 more

TIMELINE
  Dec 8   Reserved by redhat
  Dec 8   Published (CNA: redhat)
  Aug 25  EXPLOIT PUBLISHED — CVE-2023-6610 (Linux kernel). Public exploit reference added.

CWE-125 · CNA: redhat · CVSS v3.1 · 12 references · NVD status: Modified

Description

An out-of-bounds read vulnerability was found in smb2_dump_detail in fs/smb/client/smb2ops.c in the Linux Kernel. This issue could allow a local attacker to crash the system or leak internal kernel information.

Lifecycle

Complete event history — 3 events, chronological
Date	Event	Detail
December 8, 2023	Reserved	Reserved by redhat
December 8, 2023	Published	Published (CNA: redhat)
August 25, 2026	EXPLOIT PUBLISHED	EXPLOIT PUBLISHED — CVE-2023-6610 (Linux kernel). Public exploit reference added.

Affected

Affected products and packages — 31 rows
Vendor	Product / Package	Ecosystem	Version introduced	Fixed
Linux	kernel	—	—	—
Red Hat	Red Hat Enterprise Linux 8	—	—	0:4.18.0-513.18.1.rt7.320.el8_9
Red Hat	Red Hat Enterprise Linux 8	—	—	0:4.18.0-513.18.1.el8_9
Red Hat	Red Hat Enterprise Linux 8.6 Extended Update Support	—	—	0:4.18.0-372.91.1.el8_6
Red Hat	Red Hat Enterprise Linux 8.8 Extended Update Support	—	—	0:4.18.0-477.51.1.el8_8
Red Hat	Red Hat Enterprise Linux 9	—	—	0:5.14.0-362.24.1.el9_3
Red Hat	Red Hat Enterprise Linux 9	—	—	0:5.14.0-362.24.1.el9_3
Red Hat	Red Hat Enterprise Linux 9.2 Extended Update Support	—	—	0:5.14.0-284.52.1.el9_2
Red Hat	Red Hat Enterprise Linux 9.2 Extended Update Support	—	—	0:5.14.0-284.52.1.rt14.337.el9_2
Red Hat	Red Hat Virtualization 4 for Red Hat Enterprise Linux 8	—	—	0:4.18.0-372.91.1.el8_6
Red Hat	RHOL-5.8-RHEL-9	—	—	v5.8.6-22
Red Hat	RHOL-5.8-RHEL-9	—	—	v5.8.6-11
Red Hat	RHOL-5.8-RHEL-9	—	—	v6.8.1-407
Red Hat	RHOL-5.8-RHEL-9	—	—	v5.8.6-19
Red Hat	RHOL-5.8-RHEL-9	—	—	v1.0.0-479
Red Hat	RHOL-5.8-RHEL-9	—	—	v5.8.6-7
Red Hat	RHOL-5.8-RHEL-9	—	—	v0.4.0-247
Red Hat	RHOL-5.8-RHEL-9	—	—	v5.8.6-5
Red Hat	RHOL-5.8-RHEL-9	—	—	v1.1.0-227
Red Hat	RHOL-5.8-RHEL-9	—	—	v5.8.1-470
Red Hat	RHOL-5.8-RHEL-9	—	—	v2.9.6-14
Red Hat	RHOL-5.8-RHEL-9	—	—	v5.8.6-2
Red Hat	RHOL-5.8-RHEL-9	—	—	v5.8.6-24
Red Hat	RHOL-5.8-RHEL-9	—	—	v5.8.6-10
Red Hat	RHOL-5.8-RHEL-9	—	—	v0.1.0-525
Red Hat	RHOL-5.8-RHEL-9	—	—	v0.1.0-224
Red Hat	RHOL-5.8-RHEL-9	—	—	v0.28.1-56
Red Hat	Red Hat Enterprise Linux 6	—	—	—
Red Hat	Red Hat Enterprise Linux 7	—	—	—
Red Hat	Red Hat Enterprise Linux 7	—	—	—
Red Hat	Red Hat Enterprise Linux 9	—	—	—

Weaknesses

CWE-125

References (12)

Authoritative record: CVE-2023-6610 at cve.org

Vendors: linux · red hat

Weaknesses: CWE-125

About this page

This is a reference page, not a dated page of record. It assembles the complete lifecycle of CVE-2023-6610 from the CVE Program record, NVD enrichment, the CISA KEV catalog, EPSS, and OSV advisories. The box score's numbers (CVSS, EPSS, KEV status) are current as of Sunday, October 4, 2026 UTC and are re-derived as the archive grows; only dated daily editions are immutable pages of record. The authoritative source for this identifier is cve.org.