VulnerabilityModified

CVE-2023-6535

This issue may allow an unauthenticated malicious actor to send a set of crafted TCP packages when using NVMe over TCP, leading the NVMe driver to a NULL pointer dereference in the NVMe driver, causing kernel panic and a denial of service.

HIGH 7.5EPSS 1.55%

Does this matter?

High impact if exploited, but EPSS currently rates exploitation as unlikely (1.55%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.

Description

A flaw was found in the Linux kernel's NVMe driver. This issue may allow an unauthenticated malicious actor to send a set of crafted TCP packages when using NVMe over TCP, leading the NVMe driver to a NULL pointer dereference in the NVMe driver, causing kernel panic and a denial of service.

CVSS 3.1: 7.5 HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS: 1.55% probability · 74th percentile
CISA KEV: Not listed
Weakness: CWE-476
Affected: linux/linux kernel · redhat/codeready linux builder eus · redhat/codeready linux builder eus for power little endian eus · redhat/codeready linux builder for arm64 eus · redhat/codeready linux builder for ibm z systems eus · redhat/enterprise linux · redhat/enterprise linux eus · redhat/enterprise linux for arm 64 eus · redhat/enterprise linux for ibm z systems eus · redhat/enterprise linux for power little endian eus · redhat/enterprise linux for real time · redhat/enterprise linux for real time for nfv · redhat/enterprise linux server aus · redhat/enterprise linux server for power little endian update services for sap solutions · redhat/enterprise linux server tus · redhat/virtualization host
Source: secalert@redhat.com

References

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.