1. Home
  2. CVE Database
  3. CVE-2023-6356
MEDIUM · 6.5

CVE-2023-6356

A flaw was found in the Linux kernel's NVMe driver. This issue may allow an unauthenticated malicious actor to send a set of crafted TCP packages when using NVMe over TCP, leading the NVMe driver to a...

Vulnerability Description

A flaw was found in the Linux kernel's NVMe driver. This issue may allow an unauthenticated malicious actor to send a set of crafted TCP packages when using NVMe over TCP, leading the NVMe driver to a NULL pointer dereference in the NVMe driver and causing kernel panic and a denial of service.

CVSS Score

6.5

MEDIUM

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
NONE
Integrity
NONE
Availability
HIGH

Affected Products

VendorProductVersions
RedhatCodeready Linux Builder Eus8.6
RedhatCodeready Linux Builder Eus For Power Little Endian Eus8.6_ppc64le
RedhatCodeready Linux Builder For Arm64 Eus8.6_aarch64
RedhatCodeready Linux Builder For Ibm Z Systems Eus9.2_s390x
RedhatEnterprise Linux8.0
RedhatEnterprise Linux Eus8.6
RedhatEnterprise Linux For Arm 64 Eus8.6_aarch64
RedhatEnterprise Linux For Ibm Z Systems Eus8.6_s390x
RedhatEnterprise Linux For Power Little Endian Eus8.6_ppc64le
RedhatEnterprise Linux For Real Time9.2
RedhatEnterprise Linux For Real Time For Nfv9.2
RedhatEnterprise Linux Server Aus8.6
RedhatEnterprise Linux Server For Power Little Endian Update Services For Sap Solutions8.6_ppc64le
RedhatEnterprise Linux Server Tus8.6
RedhatVirtualization Host4.0
LinuxLinux Kernel>= 5.0, < 5.4.268
DebianDebian Linux10.0

Related Weaknesses (CWE)

CWE-476

References

FAQ

What is CVE-2023-6356?

CVE-2023-6356 is a vulnerability with a CVSS score of 6.5 (MEDIUM). A flaw was found in the Linux kernel's NVMe driver. This issue may allow an unauthenticated malicious actor to send a set of crafted TCP packages when using NVMe over TCP, leading the NVMe driver to a...

How severe is CVE-2023-6356?

CVE-2023-6356 has been rated MEDIUM with a CVSS base score of 6.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2023-6356?

Check the references section above for vendor advisories and patch information. Affected products include: Redhat Codeready Linux Builder Eus, Redhat Codeready Linux Builder Eus For Power Little Endian Eus, Redhat Codeready Linux Builder For Arm64 Eus, Redhat Codeready Linux Builder For Ibm Z Systems Eus, Redhat Enterprise Linux.