PT-2023-7940

CVE-2023-6536

·

Published

2023-12-11

·

Updated

2026-10-18

Description by

CVSS 4.0
8.7
High
MetricsAV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description A flaw was found in the Linux kernel's NVMe driver. This issue may allow an unauthenticated malicious actor to send a set of crafted TCP packages when using NVMe over TCP, leading the NVMe driver to a NULL pointer dereference in the nvmet req complete() function, causing kernel panic and a denial of service.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Impacts
Researchers
Vendors
Affected products
Related identifiers
ALSA-2024:0897
ALT-PU-2024-1536
ALT-PU-2024-17576
CESA-2024_0881
CESA-2024_0897
CLSA-2024-1711026398
CLSA-2024-1711026811
DLA-3841-1
OESA-2024-2569
OPENSUSE-SU-2024_0469-1
OPENSUSE-SU-2024_0515-1
OPENSUSE-SU-2024_1321-1
OPENSUSE-SU-2024_1322-1
OPENSUSE-SU-2024_1322-2
OPENSUSE-SU-2024_1332-1
OPENSUSE-SU-2024_1332-2
OPENSUSE-SU-2024:13660-1
OPENSUSE-SU-2024_1466-1
OPENSUSE-SU-2024_1480-1
OPENSUSE-SU-2024_1489-1
OPENSUSE-SU-2024_1490-1
OPENSUSE-SU-2025:14705-1
RHSA-2024:0723
RHSA-2024:0724
RHSA-2024:0725
RHSA-2024:0881
RHSA-2024_0881
RHSA-2024:0897
RHSA-2024_0897
RHSA-2024:1248
RHSA-2024_1248
RHSA-2024:3810
RXSA-2024:1248
SUSE-SU-2024:0463-1
SUSE-SU-2024:0469-1
SUSE-SU-2024:0474-1
SUSE-SU-2024:0476-1
SUSE-SU-2024:0478-1
SUSE-SU-2024:0484-1
SUSE-SU-2024:0514-1
SUSE-SU-2024:0515-1
SUSE-SU-2024:0516-1
SUSE-SU-2024:0975-1
SUSE-SU-2024:1321-1
SUSE-SU-2024:1454-1
SUSE-SU-2024:1466-1
SUSE-SU-2024:1480-1
SUSE-SU-2024:1489-1
SUSE-SU-2024:1490-1
SUSE-SU-2024:1643-1
SUSE-SU-2024:1646-1
SUSE-SU-2024:1870-1
USN-6765-1
USN-6818-1
USN-6818-2
USN-6818-3
USN-6818-4
USN-6819-1
USN-6819-2
USN-6819-3
USN-6819-4
Found an issue in the description? Have something to add? Feel free to write us 👾