A flaw was found in the Linux kernel's NVMe driver. This issue may allow an unauthenticated malicious actor to send a set of crafted TCP packages when using NVMe over TCP, leading the NVMe driver to a NULL pointer dereference in the NVMe driver, causing kernel panic and a denial of service.
CVE-2023-6536
CVSS base score
6.5 (v3.1)
Severity
MEDIUM
Attack vector
Network
Weakness
CWE-476
Last modified
November 5, 2026
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Affected products
linux linux kernel
redhat codeready linux builder eus
redhat codeready linux builder eus for power little endian eus
redhat codeready linux builder for arm64 eus
redhat codeready linux builder for ibm z systems eus
redhat enterprise linux
redhat enterprise linux eus
redhat enterprise linux for arm 64 eus
redhat enterprise linux for ibm z systems eus
redhat enterprise linux for power little endian eus
References
- access.redhat.com Third Party Advisory
- access.redhat.com Third Party Advisory
- access.redhat.com Third Party Advisory
- access.redhat.com Third Party Advisory
- access.redhat.com Third Party Advisory
- access.redhat.com Third Party Advisory
- access.redhat.com Third Party Advisory
- access.redhat.com Third Party Advisory
- access.redhat.com Third Party Advisory
- bugzilla.redhat.com Issue Tracking