Intel

CVE-2023-6536

codeready_linux_builder_eus: NULL Pointer Dereference (CVE-2023-6536)

highEPSS 1.6%

Affected

  • linux/linux_kernel between 5.0..5.4.268
  • linux/linux_kernel between 5.5..5.10.209
  • linux/linux_kernel between 5.11..5.15.148
  • linux/linux_kernel between 5.16..6.1.75
  • linux/linux_kernel between 6.2..6.6.14
  • linux/linux_kernel between 6.7..6.7.2

Description

A flaw was found in the Linux kernel's NVMe driver. This issue may allow an unauthenticated malicious actor to send a set of crafted TCP packages when using NVMe over TCP, leading the NVMe driver to a NULL pointer dereference in the NVMe driver, causing kernel panic and a denial of service.

Source: redhat_csafcvelistv5NVD (NIST)

Affected operating systems

  • linux

    debian / debian_linux10.0

  • linux

    redhat / enterprise_linux8.0

  • linux

    redhat / enterprise_linux9.0

  • linux

    redhat / enterprise_linux_eus8.6

  • linux

    redhat / enterprise_linux_eus9.2

  • linux

    redhat / enterprise_linux_for_arm_64_eus8.6_aarch64

  • linux

    redhat / enterprise_linux_for_arm_64_eus9.2_aarch64

  • linux

    redhat / enterprise_linux_for_ibm_z_systems_eus8.6_s390x

  • linux

    redhat / enterprise_linux_for_ibm_z_systems_eus9.2_s390x

  • linux

    redhat / enterprise_linux_for_power_little_endian_eus8.6_ppc64le

  • linux

    redhat / enterprise_linux_for_power_little_endian_eus9.2_ppc64le

  • linux

    redhat / enterprise_linux_for_real_time9.2

  • linux

    redhat / enterprise_linux_for_real_time_for_nfv9.2

  • linux

    redhat / enterprise_linux_server_aus8.6

  • linux

    redhat / enterprise_linux_server_aus9.2

  • linux

    redhat / enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions8.6_ppc64le

  • linux

    redhat / enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions9.2_ppc64le

  • linux

    redhat / enterprise_linux_server_tus8.6

  • linux

    linux / linux_kernel

Affected products

The following versions are affected. Older releases of the same product line are also vulnerable unless stated otherwise.

redhatcodeready_linux_builder_eus
redhatcodeready_linux_builder_eus_for_power_little_endian_eus
redhatcodeready_linux_builder_for_arm64_eus
redhatcodeready_linux_builder_for_ibm_z_systems_eus
redhatvirtualization_host

Metrics

XIEM Effective CVSS
7.5
Source: nvd-v3
EPSS percentile
74.4 %
High — this CVE ranks above the median of all CVEs scored today (rank ≥ 36%).
KEV status
—
Show all metrics
Severity
high
Priority score
81.30
Exploit maturity
no public PoC known
CVSS v3
6.5
EPSS score
1.6 %
Moderate — model estimates 1-10% exploitation likelihood.
Published
2024-02-07 21:05 UTC
CWE
CWE-476

Weakness classes (CWE)

  • CWE-476Base

    NULL Pointer Dereference

    The product dereferences a pointer that it expects to be valid but is NULL.

    cwe.mitre.org →

References & sources