CVE-2023-6535
CVE-2023-6535 · Kernel: null pointer dereference in nvmet_tcp_execute_request
This page contains facts from public vulnerability sources. Check the original advisory before updating.
This page shows selected source facts. See the linked advisories for the complete description and affected versions.
A flaw was found in the Linux kernel's NVMe driver. This issue may allow an unauthenticated malicious actor to send a set of crafted TCP packages when using NVMe over TCP, leading the NVMe driver to a NULL pointer dereference in the NVMe driver, causing kernel panic and a denial of service.
CVSS 6.5 · Medium · EPSS 1.5% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
red hat enterprise linux 8
- Versions
- ≥ 0:4.18.0-513.18.1.rt7.320.el8_9: Not affected (rpm)
No fix published
red hat enterprise linux 8
- Versions
- ≥ 0:4.18.0-513.18.1.el8_9: Not affected (rpm)
No fix published
red hat enterprise linux 8.6 extended update support
- Versions
- ≥ 0:4.18.0-372.91.1.el8_6: Not affected (rpm)
No fix published
red hat enterprise linux 8.8 extended update support
- Versions
- ≥ 0:4.18.0-477.58.1.el8_8: Not affected (rpm)
No fix published
red hat enterprise linux 9
- Versions
- ≥ 0:5.14.0-362.24.1.el9_3: Not affected (rpm)
No fix published
red hat enterprise linux 9.2 extended update support
- Versions
- ≥ 0:5.14.0-284.52.1.el9_2: Not affected (rpm)
No fix published
red hat enterprise linux 9.2 extended update support
- Versions
- ≥ 0:5.14.0-284.52.1.rt14.337.el9_2: Not affected (rpm)
No fix published
red hat virtualization 4 for red hat enterprise linux 8
- Versions
- ≥ 0:4.18.0-372.91.1.el8_6: Not affected (rpm)
No fix published
rhol-5.8-rhel-9
- Versions
- ≥ v5.8.6-22: Not affected (rpm)
No fix published
rhol-5.8-rhel-9
- Versions
- ≥ v5.8.6-11: Not affected (rpm)
No fix published
rhol-5.8-rhel-9
- Versions
- ≥ v6.8.1-407: Not affected (rpm)
No fix published
rhol-5.8-rhel-9
- Versions
- ≥ v5.8.6-19: Not affected (rpm)
No fix published
rhol-5.8-rhel-9
- Versions
- ≥ v1.0.0-479: Not affected (rpm)
No fix published
rhol-5.8-rhel-9
- Versions
- ≥ v5.8.6-7: Not affected (rpm)
No fix published
rhol-5.8-rhel-9
- Versions
- ≥ v0.4.0-247: Not affected (rpm)
No fix published
rhol-5.8-rhel-9
- Versions
- ≥ v5.8.6-5: Not affected (rpm)
No fix published
rhol-5.8-rhel-9
- Versions
- ≥ v1.1.0-227: Not affected (rpm)
No fix published
rhol-5.8-rhel-9
- Versions
- ≥ v5.8.1-470: Not affected (rpm)
No fix published
rhol-5.8-rhel-9
- Versions
- ≥ v2.9.6-14: Not affected (rpm)
No fix published
rhol-5.8-rhel-9
- Versions
- ≥ v5.8.6-2: Not affected (rpm)
No fix published
rhol-5.8-rhel-9
- Versions
- ≥ v5.8.6-24: Not affected (rpm)
No fix published
rhol-5.8-rhel-9
- Versions
- ≥ v5.8.6-10: Not affected (rpm)
No fix published
rhol-5.8-rhel-9
- Versions
- ≥ v0.1.0-525: Not affected (rpm)
No fix published
rhol-5.8-rhel-9
- Versions
- ≥ v0.1.0-224: Not affected (rpm)
No fix published
Original sources
- https://access.redhat.com/errata/RHSA-2024:0723
- https://access.redhat.com/errata/RHSA-2024:0724
- https://access.redhat.com/errata/RHSA-2024:0725
- https://access.redhat.com/errata/RHSA-2024:0881
- https://access.redhat.com/errata/RHSA-2024:0897
- https://access.redhat.com/errata/RHSA-2024:1248
- https://access.redhat.com/errata/RHSA-2024:2094
- https://access.redhat.com/errata/RHSA-2024:3810
- https://access.redhat.com/security/cve/CVE-2023-6535
- https://bugzilla.redhat.com/show_bug.cgi?id=2254053
- https://lists.debian.org/debian-lts-announce/2024/06/msg00016.html
- https://security.netapp.com/advisory/ntap-20240415-0003/
- https://lists.fedoraproject.org/archives/list/[email protected]/message/ZFYW6R64GPLUOXSQBJI3JBUX3HGLAYPP/
- https://nvd.nist.gov/vuln/detail/CVE-2023-6535