NetSight
IP …
medium6.5

CVE-2023-6535

A flaw was found in the Linux kernel's NVMe driver.

Impact

A flaw was found in the Linux kernel's NVMe driver. This issue may allow an unauthenticated malicious actor to send a set of crafted TCP packages when using NVMe over TCP, leading the NVMe driver to a NULL pointer dereference in the NVMe driver, causing kernel panic and a denial of service.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
All versions
RedhatCodeready Linux Builder Eus
Versions 8.6, 9.2
RedhatCodeready Linux Builder Eus For Power Little Endian Eus
Versions 8.6_ppc64le, 9.2_ppc64le
RedhatCodeready Linux Builder For Arm64 Eus
Versions 8.6_aarch64, 9.2_aarch64
RedhatCodeready Linux Builder For Ibm Z Systems Eus
Version 9.2_s390x
RedhatEnterprise Linux
Versions 8.0, 9.0
RedhatEnterprise Linux Eus
Versions 8.6, 9.2
RedhatEnterprise Linux For Arm 64 Eus
Versions 8.6_aarch64, 9.2_aarch64
RedhatEnterprise Linux For Ibm Z Systems Eus
Versions 8.6_s390x, 9.2_s390x
RedhatEnterprise Linux For Power Little Endian Eus
Versions 8.6_ppc64le, 9.2_ppc64le
RedhatEnterprise Linux For Real Time
Version 9.2
RedhatEnterprise Linux For Real Time For Nfv
Version 9.2

Weakness classification

CWE-476

References