CVE-2023-6536

A flaw was found in the Linux kernel's NVMe driver. This issue may allow an unauthenticated malicious actor to send a set of crafted TCP packages when using NVMe over TCP, leading the NVMe driver to a NULL pointer dereference in the NVMe driver, causing kernel panic and a denial of service.

Score
CVSS 3.1 7.5 High
Status
Modified - secalert@redhat.com
Published
2024-02-07
Last modified
2025-11-06
Weaknesses
CWE-476

Affected products

References

 
 
© AVABIS GmbH privacypolicy about