CVE-2023-6356
7.5
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Exploitability: 3.9 / Impact: 3.6
Source: NVD
Description
A flaw was found in the Linux kernel's NVMe driver. This issue may allow an unauthenticated malicious actor to send a set of crafted TCP packages when using NVMe over TCP, leading the NVMe driver to a NULL pointer dereference in the NVMe driver and causing kernel panic and a denial of service.
Affected (31)
Products: Redhat: Codeready Linux Builder Eus, Codeready Linux Builder Eus For Power Little Endian Eus, Codeready Linux Builder For Arm64 Eus, Codeready Linux Builder For Ibm Z Systems Eus, Enterprise Linux, Enterprise Linux Eus, Enterprise Linux For Arm 64 Eus, Enterprise Linux For Ibm Z Systems Eus, Enterprise Linux For Power Little Endian Eus, Enterprise Linux For Real Time, Enterprise Linux For Real Time For Nfv, Enterprise Linux Server Aus, Enterprise Linux Server For Power Little Endian Update Services For Sap Solutions, Enterprise Linux Server Tus, Virtualization Host · Linux: Linux Kernel · Debian: Debian Linux
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| Version 8.6 | |
| Version 8.6_ppc64le | |
| Version 8.6_aarch64 | |
| Version 9.2_s390x | |
| Version 9.0 | |
| Version 8.6 | |
| Version 8.6_aarch64 | |
| Version 8.6_s390x | |
| Version 8.6_ppc64le | |
| Version 9.2 | |
| Version 9.2 | |
| Version 8.6 | |
| Version 8.6_ppc64le | |
| Version 8.6 |
Configuration B
| Vulnerable Software | Affected Versions |
|---|---|
| Version 4.0 |
| Running on/with | Platform Versions |
|---|---|
Redhat Enterprise Linux | Version 8.0 |
Configuration C
| Vulnerable Software | Affected Versions |
|---|---|
| From 5.0 to 5.4.268 |
Configuration D
| Vulnerable Software | Affected Versions |
|---|---|
| Version 10.0 |
Related CWEs
References (23)
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Issue Tracking
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Timeline
No history available yet.