CVE-2023-0881
DDoS in Ubuntu package linux-bluefield
Running DDoS on tcp port 22 will trigger a kernel crash. This issue is introduced by the backport of a commit regarding nft_lookup without the subsequent fixes that were introduced after this commit. The resolution of this CVE introduces those commits to the linux-bluefield package.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- None
- Integrity
- None
- Availability
- High
Exploit likelihood
What each source reports
CVE List Score used
DDoS in Ubuntu package linux-bluefield
Running DDoS on tcp port 22 will trigger a kernel crash. This issue is introduced by the backport of a commit regarding nft_lookup without the subsequent fixes that were introduced after this commit. The resolution of this CVE introduces those commits to the linux-bluefield package.
- Record
CVE-2023-0881- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-20
- Updated
- 2026-11-02
EUVDEUVD-2023-12870
Running DDoS on tcp port 22 will trigger a kernel crash. This issue is introduced by the backport of a commit regarding nft_lookup without the subsequent fixes that were introduced after this commit. The resolution of this CVE introduces those commits to the linux-bluefield package.
- Record
EUVD-2023-12870- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-wrxc-qw43-c96x
Running DDoS on tcp port 22 will trigger a kernel crash. This issue is introduced by the backport...
Running DDoS on tcp port 22 will trigger a kernel crash. This issue is introduced by the backport of a commit regarding nft_lookup without the subsequent fixes that were introduced after this commit. The resolution of this CVE introduces those commits to the linux-bluefield package.
- Record
GHSA-wrxc-qw43-c96x- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-20, CWE-1333
- Updated
- 2026-11-02
NVD
Running DDoS on tcp port 22 will trigger a kernel crash. This issue is introduced by the backport of a commit regarding nft_lookup without the subsequent fixes that were introduced after this commit. The resolution of this CVE introduces those commits to the linux-bluefield package.
- Record
CVE-2023-0881- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-20, CWE-1333
- Updated
- 2026-11-02
OSVUBUNTU-CVE-2023-0881
Running DDoS on tcp port 22 will trigger a kernel crash. This issue is introduced by the backport of a commit regarding nft_lookup without the subsequent fixes that were introduced after this commit. The resolution of this CVE introduces those commits to the linux-bluefield package.
- Record
UBUNTU-CVE-2023-0881- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-06
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
linux-bluefieldUbuntu:Pro:20.04:LTS |
All versions, plus listed versions 5.4.0-1007.105.4.0-1011.145.4.0-1012.155.4.0-1013.165.4.0-1016.19 Show 45 moreShow less5.4.0-1019.225.4.0-1020.235.4.0-1021.245.4.0-1022.255.4.0-1023.265.4.0-1025.285.4.0-1026.295.4.0-1028.315.4.0-1030.335.4.0-1032.355.4.0-1035.385.4.0-1036.395.4.0-1040.445.4.0-1042.475.4.0-1044.495.4.0-1045.505.4.0-1046.515.4.0-1047.525.4.0-1049.555.4.0-1050.565.4.0-1054.605.4.0-1058.645.4.0-1059.655.4.0-1060.665.4.0-1062.685.4.0-1064.705.4.0-1065.715.4.0-1066.725.4.0-1068.745.4.0-1070.765.4.0-1071.775.4.0-1072.785.4.0-1073.795.4.0-1074.805.4.0-1075.815.4.0-1076.825.4.0-1077.835.4.0-1078.845.4.0-1079.855.4.0-1080.875.4.0-1081.885.4.0-1082.895.4.0-1083.905.4.0-1084.915.4.0-1085.92 |
None known |
linux-bluefieldUbuntu:Nvidia-BlueField:22.04:LTS |
All versions, plus listed versions 5.15.0-1011.135.15.0-1014.165.15.0-1015.175.15.0-1017.195.15.0-1019.21 Show 45 moreShow less5.15.0-1021.235.15.0-1022.245.15.0-1023.255.15.0-1024.265.15.0-1027.295.15.0-1028.305.15.0-1031.335.15.0-1032.345.15.0-1033.355.15.0-1035.375.15.0-1036.385.15.0-1037.395.15.0-1038.405.15.0-1040.425.15.0-1042.445.15.0-1043.455.15.0-1044.465.15.0-1045.475.15.0-1047.495.15.0-1048.505.15.0-1050.525.15.0-1051.535.15.0-1052.545.15.0-1053.555.15.0-1054.565.15.0-1056.585.15.0-1057.595.15.0-1058.605.15.0-1059.615.15.0-1060.625.15.0-1061.635.15.0-1062.645.15.0-1063.655.15.0-1064.665.15.0-1065.675.15.0-1066.685.15.0-1067.695.15.0-1069.715.15.0-1070.725.15.0-1072.745.15.0-1074.765.15.0-1075.775.15.0-1076.785.15.0-1077.795.15.0-1079.81 |
None known |
linux-bluefieldUbuntu:Nvidia-BlueField:24.04:LTS |
All versions, plus listed versions 6.8.0-1011.156.8.0-1012.166.8.0-1013.176.8.0-1014.186.8.0-1016.20 Show 11 moreShow less6.8.0-1017.216.8.0-1022.266.8.0-1023.276.8.0-1026.306.8.0-1028.336.8.0-1029.346.8.0-1030.356.8.0-1031.366.8.0-1032.376.8.0-1033.386.8.0-1036.41 |
None known |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | OSV | |
| first indexed | CVE List, EUVD, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2023-0881 is a high vulnerability (CVSS 7.5) in Canonical Linux-bluefield, published March 31, 2025. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.44%, the 38th percentile. No source names a fixed version.
References
Left out here: 53 versions. The JSON record has them.