Lucene search

PRIOn knowledge basePRION:CVE-2023-6121

HistoryNov 16, 2023 - 3:15 p.m.

Heap overflow

2023-11-1615:15:00

PRIOn knowledge base

www.prio-n.com

nvme

tcp

linux kernel

heap overflow

vulnerability

remote attack

buffer overflow

kmalloc

kernel ring buffer

nvd

7.2 High

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

67.8%

JSON

An out-of-bounds read vulnerability was found in the NVMe-oF/TCP subsystem in the Linux kernel. This issue may allow a remote attacker to send a crafted TCP packet, triggering a heap-based buffer overflow that results in kmalloc data being printed and potentially leaked to the kernel ring buffer (dmesg).

CPENameOperatorVersion
enterprise_linuxeq7.0
enterprise_linuxeq6.0
enterprise_linuxeq8.0
enterprise_linuxeq9.0

Name	Operator	Version
enterprise_linux	eq	7.0
enterprise_linux	eq	6.0
enterprise_linux	eq	8.0
enterprise_linux	eq	9.0

References

access.redhat.com/security/cve/CVE-2023-6121

bugzilla.redhat.com/show_bug.cgi?id=2250043

lists.debian.org/debian-lts-announce/2024/01/msg00005.html