CVEvulnerability

CVE-2023-6356

7.5 HIGH Published 2024-02-07 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2024-02-07
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
6.5 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS 3.1 ([email protected])
7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weaknesses
CWE-476

Description

A flaw was found in the Linux kernel's NVMe driver. This issue may allow an unauthenticated malicious actor to send a set of crafted TCP packages when using NVMe over TCP, leading the NVMe driver to a NULL pointer dereference in the NVMe driver and causing kernel panic and a denial of service.

Affected configurations

• redhat codeready linux builder eus 8.6 • redhat codeready linux builder eus 9.2 • redhat codeready linux builder eus for power little endian eus 8.6 ppc64le • redhat codeready linux builder eus for power little endian eus 9.2 ppc64le • redhat codeready linux builder for arm64 eus 8.6 aarch64 • redhat codeready linux builder for arm64 eus 9.2 aarch64 • redhat codeready linux builder for ibm z systems eus 9.2 s390x • redhat enterprise linux 8.0 • redhat enterprise linux 9.0 • redhat enterprise linux eus 8.6 • redhat enterprise linux eus 9.2 • redhat enterprise linux for arm 64 eus 8.6 aarch64 • redhat enterprise linux for arm 64 eus 9.2 aarch64 • redhat enterprise linux for ibm z systems eus 8.6 s390x • redhat enterprise linux for ibm z systems eus 9.2 s390x • redhat enterprise linux for power little endian eus 8.6 ppc64le • redhat enterprise linux for power little endian eus 9.2 ppc64le • redhat enterprise linux for real time 9.2 • redhat enterprise linux for real time for nfv 9.2 • redhat enterprise linux server aus 8.6 • redhat enterprise linux server aus 9.2 • redhat enterprise linux server for power little endian update services for sap solutions 8.6 ppc64le • redhat enterprise linux server for power little endian update services for sap solutions 9.2 ppc64le • redhat enterprise linux server tus 8.6 • redhat virtualization host 4.0 • linux linux kernel (>= 5.0 < 5.4.268) • linux linux kernel (>= 5.5 < 5.10.209) • linux linux kernel (>= 5.11 < 5.15.148) • linux linux kernel (>= 5.16 < 6.1.75) • linux linux kernel (>= 6.2 < 6.6.14) • linux linux kernel (>= 6.7 < 6.7.2) • debian debian linux 10.0

Related

Weakness · CWE (1)

  • CWE-476 NULL Pointer Dereference weakness

References