6.7
Medium
CVE-2023-6238 A buffer overflow vulnerability was found in the NVM Express (NVMe) driver in the Linux kernel
Description
A buffer overflow vulnerability was found in the NVM Express (NVMe) driver in the Linux kernel. Only privileged user could specify a small meta buffer and let the device perform larger Direct Memory Access (DMA) into the same buffer, overwriting unrelated kernel memory, causing random kernel crashes and memory corruption.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| kernel | Versions not published | |
| Red Hat Enterprise Linux 6 | Versions not published | |
| Red Hat Enterprise Linux 7 | Versions not published | |
| Red Hat Enterprise Linux 8 | Versions not published | |
| Red Hat Enterprise Linux 9 | Versions not published | |
| Fedora | Versions not published |
References
- access.redhat.com access.redhat.com
- RHBZ#2250834 bugzilla.redhat.com
Timeline
- Published
- Last modified
Other CVEs of kernel
The 279 CVEs of kernel →
CVE-2024-1312
A use-after-free flaw was found in the Linux kernel's Memory Management subsystem when a user wins two races at the same…
5.1
Medium
CVE-2023-6200
A race condition was found in the Linux Kernel
7.5
High
CVE-2023-6560
An out-of-bounds memory access flaw was found in the io_uring SQ/CQ rings functionality in the Linux kernel
5.5
Medium
CVE-2023-5972
A null pointer dereference flaw was found in the nft_inner.c functionality of netfilter in the Linux kernel
7.0
High