CVE-2023-6121

2023-11-1600:00:00

ubuntu.com

cve-2023-6121

vulnerability

linux kernel

out-of-bounds read

tcp packet

buffer overflow

kernel ring buffer

bugzilla

redhat

suse

heap-based

4.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

4.7 Medium

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

67.8%

JSON

An out-of-bounds read vulnerability was found in the NVMe-oF/TCP subsystem
in the Linux kernel. This issue may allow a remote attacker to send a
crafted TCP packet, triggering a heap-based buffer overflow that results in
kmalloc data being printed and potentially leaked to the kernel ring buffer
(dmesg).

Bugs

OSVersionArchitecturePackageVersionFilename
ubuntu18.04noarchlinux< 4.15.0-223.235UNKNOWN
ubuntu20.04noarchlinux< 5.4.0-173.191UNKNOWN
ubuntu22.04noarchlinux< 5.15.0-100.110UNKNOWN
ubuntu23.10noarchlinux< 6.5.0-25.25UNKNOWN
ubuntu18.04noarchlinux-aws< 4.15.0-1166.179UNKNOWN
ubuntu20.04noarchlinux-aws< 5.4.0-1120.130UNKNOWN
ubuntu22.04noarchlinux-aws< 5.15.0-1056.61UNKNOWN
ubuntu23.10noarchlinux-aws< 6.5.0-1015.15UNKNOWN
ubuntu20.04noarchlinux-aws-5.15< 5.15.0-1056.61~20.04.1UNKNOWN
ubuntu18.04noarchlinux-aws-5.4< 5.4.0-1120.130~18.04.1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	18.04	noarch	linux	< 4.15.0-223.235	UNKNOWN
ubuntu	20.04	noarch	linux	< 5.4.0-173.191	UNKNOWN
ubuntu	22.04	noarch	linux	< 5.15.0-100.110	UNKNOWN
ubuntu	23.10	noarch	linux	< 6.5.0-25.25	UNKNOWN
ubuntu	18.04	noarch	linux-aws	< 4.15.0-1166.179	UNKNOWN
ubuntu	20.04	noarch	linux-aws	< 5.4.0-1120.130	UNKNOWN
ubuntu	22.04	noarch	linux-aws	< 5.15.0-1056.61	UNKNOWN
ubuntu	23.10	noarch	linux-aws	< 6.5.0-1015.15	UNKNOWN
ubuntu	20.04	noarch	linux-aws-5.15	< 5.15.0-1056.61~20.04.1	UNKNOWN
ubuntu	18.04	noarch	linux-aws-5.4	< 5.4.0-1120.130~18.04.1	UNKNOWN