NetSight
IP …
high8.8

CVE-2023-5178

A use-after-free vulnerability was found in drivers/nvme/target/tcp.c` in `nvmet_tcp_free_crypto` due to a logical bug in the NVMe/TCP subsystem in the Linux k…

Impact

A use-after-free vulnerability was found in drivers/nvme/target/tcp.c` in `nvmet_tcp_free_crypto` due to a logical bug in the NVMe/TCP subsystem in the Linux kernel. This issue may allow a malicious user to cause a use-after-free and double-free problem, which may permit remote code execution or lead to local privilege escalation.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 5.0 before 5.4.260
from 5.5 before 5.10.199
from 5.11 before 5.15.137
from 5.16 before 6.1.60
from 6.2 before 6.5.9
RedhatEnterprise Linux
Versions 8.0, 9.0
NetappActive Iq Unified Manager
All versions
NetappSolidfire \& Hci Management Node
All versions
NetappSolidfire \& Hci Storage Node
All versions

Weakness classification

CWE-416

References