7.5
CVE-2023-6356
- EPSS 1.46%
- Veröffentlicht 07.02.2024 21:15:08
- Zuletzt bearbeitet 04.11.2025 19:16:24
- Erkennungen
Kernel: null pointer dereference in nvmet_tcp_build_iovec
A flaw was found in the Linux kernel's NVMe driver. This issue may allow an unauthenticated malicious actor to send a set of crafted TCP packages when using NVMe over TCP, leading the NVMe driver to a NULL pointer dereference in the NVMe driver and causing kernel panic and a denial of service.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Redhat ≫ Codeready Linux Builder Eus Version 8.6
Redhat ≫ Codeready Linux Builder Eus Version 9.2
Redhat ≫ Codeready Linux Builder Eus For Power Little Endian Eus Version 8.6_ppc64le
Redhat ≫ Codeready Linux Builder Eus For Power Little Endian Eus Version 9.2_ppc64le
Redhat ≫ Codeready Linux Builder For Arm64 Eus Version 8.6_aarch64
Redhat ≫ Codeready Linux Builder For Arm64 Eus Version 9.2_aarch64
Redhat ≫ Codeready Linux Builder For Ibm Z Systems Eus Version 9.2_s390x
Redhat ≫ Enterprise Linux Version 8.0
Redhat ≫ Enterprise Linux Version 9.0
Redhat ≫ Enterprise Linux Eus Version 8.6
Redhat ≫ Enterprise Linux Eus Version 9.2
Redhat ≫ Enterprise Linux For Arm 64 Eus Version 8.6_aarch64
Redhat ≫ Enterprise Linux For Arm 64 Eus Version 9.2_aarch64
Redhat ≫ Enterprise Linux For Ibm Z Systems Eus Version 8.6_s390x
Redhat ≫ Enterprise Linux For Ibm Z Systems Eus Version 9.2_s390x
Redhat ≫ Enterprise Linux For Power Little Endian Eus Version 8.6_ppc64le
Redhat ≫ Enterprise Linux For Power Little Endian Eus Version 9.2_ppc64le
Redhat ≫ Enterprise Linux For Real Time Version 9.2
Redhat ≫ Enterprise Linux For Real Time For Nfv Version 9.2
Redhat ≫ Enterprise Linux Server Aus Version 8.6
Redhat ≫ Enterprise Linux Server Aus Version 9.2
Redhat ≫ Enterprise Linux Server For Power Little Endian Update Services For Sap Solutions Version 8.6_ppc64le
Redhat ≫ Enterprise Linux Server For Power Little Endian Update Services For Sap Solutions Version 9.2_ppc64le
Redhat ≫ Enterprise Linux Server Tus Version 8.6
Redhat ≫ Virtualization Host Version 4.0
Linux ≫ Linux Kernel Version >= 5.0 < 5.4.268
Linux ≫ Linux Kernel Version >= 5.5 < 5.10.209
Linux ≫ Linux Kernel Version >= 5.11 < 5.15.148
Linux ≫ Linux Kernel Version >= 5.16 < 6.1.75
Linux ≫ Linux Kernel Version >= 6.2 < 6.6.14
Linux ≫ Linux Kernel Version >= 6.7 < 6.7.2
Debian ≫ Debian Linux Version 10.0
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. 
Login
Login| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 1.46% | 0.711 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| NIST | 7.5 | 3.9 | 3.6 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
|
| RedHat | 6.5 | 2.8 | 3.6 |
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
|
CWE-476 NULL Pointer Dereference
The product dereferences a pointer that it expects to be valid but is NULL.
https://access.redhat.com/errata/RHSA-2024:0724
https://lists.debian.org/debian-lts-announce/2024/06/msg00016.html
https://access.redhat.com/errata/RHSA-2024:2094
https://access.redhat.com/errata/RHSA-2024:0723
https://access.redhat.com/errata/RHSA-2024:0725
https://access.redhat.com/errata/RHSA-2024:0881
https://access.redhat.com/errata/RHSA-2024:0897
https://access.redhat.com/errata/RHSA-2024:1248
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZFYW6R64GPLUOXSQBJI3JBUX3HGLAYPP/
https://access.redhat.com/errata/RHSA-2024:3810
https://access.redhat.com/security/cve/CVE-2023-6356
https://bugzilla.redhat.com/show_bug.cgi?id=2254054
https://security.netapp.com/advisory/ntap-20240415-0002/