CVE-2023-6536: Kernel: null pointer dereference in __nvmet_req_complete
A flaw was found in the Linux kernel's NVMe driver. This issue may allow an unauthenticated malicious actor to send a set of crafted TCP packages when using NVMe over TCP, leading the NVMe driver to a NULL pointer dereference in the NVMe driver, causing kernel panic and a denial of service.
Other sources
Linux Kernel is vulnerable to a denial of service, caused by a NULL pointer dereference flaw in the NVMe driver. By sending specially crafted TCP packages when using NVMe over TCP, a remote authenticated attacker could exploit this vulnerability to cause kernel panic, and results in a denial of service condition.
— IBM
There's a flaw in Linux kernel's NVMe driver where an attacker can send crafted NVMe-oF/TCP packets leading to NULL point dereference in nvmetreqcomplete. A successfuly attack can result in a remote Denial-of-service.
— Red Hat
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2023-6536?
CVE-2023-6536 has been classified as a high severity vulnerability due to its potential to cause kernel panic and denial of service.
Which software is affected by CVE-2023-6536?
CVE-2023-6536 affects various versions of the Linux kernel, IBM Security Verify Governance, and Red Hat enterprise Linux components among others.
How do I fix CVE-2023-6536?
To mitigate CVE-2023-6536, upgrade to a patched version of the Linux kernel or affected software components as the updates become available.
What kind of attack does CVE-2023-6536 allow?
CVE-2023-6536 allows an unauthenticated attacker to exploit the NVMe driver over TCP, potentially causing a system crash.
Is there a workaround for CVE-2023-6536 if I cannot apply a patch immediately?
There are no universal workarounds; disabling NVMe over TCP may prevent exploitation until a patch can be applied.