NetSight
IP …
medium6.5

CVE-2023-6536

A flaw was found in the Linux kernel's NVMe driver.

Impact

A flaw was found in the Linux kernel's NVMe driver. This issue may allow an unauthenticated malicious actor to send a set of crafted TCP packages when using NVMe over TCP, leading the NVMe driver to a NULL pointer dereference in the NVMe driver, causing kernel panic and a denial of service.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 5.0 before 5.4.268
from 5.5 before 5.10.209
from 5.11 before 5.15.148
from 5.16 before 6.1.75
from 6.2 before 6.6.14
from 6.7 before 6.7.2
RedhatCodeready Linux Builder Eus
Versions 8.6, 9.2
RedhatCodeready Linux Builder Eus For Power Little Endian Eus
Versions 8.6_ppc64le, 9.2_ppc64le
RedhatCodeready Linux Builder For Arm64 Eus
Versions 8.6_aarch64, 9.2_aarch64
RedhatCodeready Linux Builder For Ibm Z Systems Eus
Version 9.2_s390x
RedhatEnterprise Linux
Versions 8.0, 9.0
RedhatEnterprise Linux Eus
Versions 8.6, 9.2
RedhatEnterprise Linux For Arm 64 Eus
Versions 8.6_aarch64, 9.2_aarch64
RedhatEnterprise Linux For Ibm Z Systems Eus
Versions 8.6_s390x, 9.2_s390x
RedhatEnterprise Linux For Power Little Endian Eus
Versions 8.6_ppc64le, 9.2_ppc64le
RedhatEnterprise Linux For Real Time
Version 9.2
RedhatEnterprise Linux For Real Time For Nfv
Version 9.2

Weakness classification

CWE-476

References