CVE-2023-6356

Published: Feb 7, 2024Modified: Jun 17, 2026

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

A flaw was found in the Linux kernel's NVMe driver. This issue may allow an unauthenticated malicious actor to send a set of crafted TCP packages when using NVMe over TCP, leading the NVMe driver to a NULL pointer dereference in the NVMe driver and causing kernel panic and a denial of service.

Affected (31)

Products: Redhat: Codeready Linux Builder Eus, Codeready Linux Builder Eus For Power Little Endian Eus, Codeready Linux Builder For Arm64 Eus, Codeready Linux Builder For Ibm Z Systems Eus, Enterprise Linux, Enterprise Linux Eus, Enterprise Linux For Arm 64 Eus, Enterprise Linux For Ibm Z Systems Eus, Enterprise Linux For Power Little Endian Eus, Enterprise Linux For Real Time, Enterprise Linux For Real Time For Nfv, Enterprise Linux Server Aus, Enterprise Linux Server For Power Little Endian Update Services For Sap Solutions, Enterprise Linux Server Tus, Virtualization Host · Linux: Linux Kernel · Debian: Debian Linux

Redhat

15 products

Codeready Linux Builder Eus

Codeready Linux Builder Eus For Power Little Endian Eus

Codeready Linux Builder For Arm64 Eus

Codeready Linux Builder For Ibm Z Systems Eus

Enterprise Linux

Enterprise Linux Eus

Enterprise Linux For Arm 64 Eus

Enterprise Linux For Ibm Z Systems Eus

Enterprise Linux For Power Little Endian Eus

Enterprise Linux For Real Time

Enterprise Linux For Real Time For Nfv

Enterprise Linux Server Aus

Enterprise Linux Server For Power Little Endian Update Services For Sap Solutions

Enterprise Linux Server Tus

1 product

1 product

Configuration A

23 vulnerable

Vulnerable Software	Affected Versions
Redhat Codeready Linux Builder Eus	Version 8.6
Redhat Codeready Linux Builder Eus	Version 9.2
Redhat Codeready Linux Builder Eus For Power Little Endian Eus	Version 8.6_ppc64le
Redhat Codeready Linux Builder Eus For Power Little Endian Eus	Version 9.2_ppc64le
Redhat Codeready Linux Builder For Arm64 Eus	Version 8.6_aarch64
Redhat Codeready Linux Builder For Arm64 Eus	Version 9.2_aarch64
Redhat Codeready Linux Builder For Ibm Z Systems Eus	Version 9.2_s390x
Redhat Enterprise Linux	Version 9.0
Redhat Enterprise Linux Eus	Version 8.6
Redhat Enterprise Linux Eus	Version 9.2
Redhat Enterprise Linux For Arm 64 Eus	Version 8.6_aarch64
Redhat Enterprise Linux For Arm 64 Eus	Version 9.2_aarch64
Redhat Enterprise Linux For Ibm Z Systems Eus	Version 8.6_s390x
Redhat Enterprise Linux For Ibm Z Systems Eus	Version 9.2_s390x
Redhat Enterprise Linux For Power Little Endian Eus	Version 8.6_ppc64le
Redhat Enterprise Linux For Power Little Endian Eus	Version 9.2_ppc64le
Redhat Enterprise Linux For Real Time	Version 9.2
Redhat Enterprise Linux For Real Time For Nfv	Version 9.2
Redhat Enterprise Linux Server Aus	Version 8.6
Redhat Enterprise Linux Server Aus	Version 9.2
Redhat Enterprise Linux Server For Power Little Endian Update Services For Sap Solutions	Version 8.6_ppc64le
Redhat Enterprise Linux Server For Power Little Endian Update Services For Sap Solutions	Version 9.2_ppc64le
Redhat Enterprise Linux Server Tus	Version 8.6

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Redhat Virtualization Host	Version 4.0

Running on/with	Platform Versions
Redhat Enterprise Linux	Version 8.0

Configuration C

6 vulnerable

Vulnerable Software	Affected Versions
Linux Linux Kernel	5.0 ≤ version < 5.4.268
Linux Linux Kernel	5.11 ≤ version < 5.15.148
Linux Linux Kernel	5.16 ≤ version < 6.1.75
Linux Linux Kernel	5.5 ≤ version < 5.10.209
Linux Linux Kernel	6.2 ≤ version < 6.6.14
Linux Linux Kernel	6.7 ≤ version < 6.7.2