CVE-2023-5178
A use-after-free vulnerability was found in drivers/nvme/target/tcp.c` in `nvmet_tcp_free_crypto` due to a logical bug in the NVMe/TCP subsystem in the Linux kernel.
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (9.62%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
A use-after-free vulnerability was found in drivers/nvme/target/tcp.c` in `nvmet_tcp_free_crypto` due to a logical bug in the NVMe/TCP subsystem in the Linux kernel. This issue may allow a malicious user to cause a use-after-free and double-free problem, which may permit remote code execution or lead to local privilege escalation.
- CVSS 3.1
- 8.8 HIGHCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- EPSS
- 9.62% probability · 95th percentile
- Public exploits
- None in Exploit-DB
- CISA KEV
- Not listed
- Weakness
- CWE-416
- Affected
- linux/linux kernel · redhat/enterprise linux · netapp/active iq unified manager · netapp/solidfire \& hci management node · netapp/solidfire \& hci storage node
- Source
- secalert@redhat.com
EPSS 9.6% since 26 October 2026; no change recorded yet. The dashed line is the ten per cent mark our analysts treat as “patch before the next change window”. Points are recorded when the score first appears and whenever it moves by a percentage point or more.
References
- https://access.redhat.com/errata/RHSA-2023:7370Third Party Advisory
- https://access.redhat.com/errata/RHSA-2023:7379Third Party Advisory
- https://access.redhat.com/errata/RHSA-2023:7418Third Party Advisory
- https://access.redhat.com/errata/RHSA-2023:7548Third Party Advisory
- https://access.redhat.com/errata/RHSA-2023:7549Third Party Advisory
- https://access.redhat.com/errata/RHSA-2023:7551Third Party Advisory
- https://access.redhat.com/errata/RHSA-2023:7554Third Party Advisory
- https://access.redhat.com/errata/RHSA-2023:7557Third Party Advisory
- https://access.redhat.com/errata/RHSA-2023:7559Third Party Advisory
- https://access.redhat.com/errata/RHSA-2024:0340Third Party Advisory
- https://access.redhat.com/errata/RHSA-2024:0378Third Party Advisory
- https://access.redhat.com/errata/RHSA-2024:0386Third Party Advisory
- https://access.redhat.com/errata/RHSA-2024:0412Third Party Advisory
- https://access.redhat.com/errata/RHSA-2024:0431Third Party Advisory
- https://access.redhat.com/errata/RHSA-2024:0432Third Party Advisory
- https://access.redhat.com/errata/RHSA-2024:0461Third Party Advisory
- https://access.redhat.com/errata/RHSA-2024:0554Third Party Advisory
- https://access.redhat.com/errata/RHSA-2024:0575Third Party Advisory
- https://access.redhat.com/errata/RHSA-2024:1268Third Party Advisory
- https://access.redhat.com/errata/RHSA-2024:1269Third Party Advisory
- https://access.redhat.com/errata/RHSA-2024:1278Third Party Advisory
- https://access.redhat.com/security/cve/CVE-2023-5178Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2241924Issue Tracking, Third Party Advisory
- https://lore.kernel.org/linux-nvme/20231002105428.226515-1-sagi@grimberg.me/Mailing List, Patch, Vendor Advisory
- https://access.redhat.com/errata/RHSA-2023:7370Third Party Advisory
- https://access.redhat.com/errata/RHSA-2023:7379Third Party Advisory
- https://access.redhat.com/errata/RHSA-2023:7418Third Party Advisory
- https://access.redhat.com/errata/RHSA-2023:7548Third Party Advisory
- https://access.redhat.com/errata/RHSA-2023:7549Third Party Advisory
- https://access.redhat.com/errata/RHSA-2023:7551Third Party Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA, exploits from Exploit-DB. Refreshed daily. Download this record as JSON.