CVE-2023-6121Medium· 4.3▾ SunlitAn out-of-bounds read vulnerability was found in the NVMe-oF/TCP subsystem in the Linux kernel. This issue may allow a remote attacker to send a crafted TCP packet, triggering a heap-based buffer overflow that results in kmalloc data bei…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 23.7 · likelihood 0.3 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Last analysed / modified upstream
1.6%
An out-of-bounds read vulnerability was found in the NVMe-oF/TCP subsystem in the Linux kernel. This issue may allow a remote attacker to send a crafted TCP packet, triggering a heap-based buffer overflow that results in kmalloc data being printed and potentially leaked to the kernel ring buffer (dmesg).
enterprise_linux = 6.0enterprise_linux = 7.0enterprise_linux = 8.0enterprise_linux = 9.0Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2023-39194Low· 3.2A flaw was found in the XFRM subsystem in the Linux kernel
CVE-2023-39189Medium· 5.1A flaw was found in the Netfilter subsystem in the Linux kernel
CVE-2023-39192Medium· 6.7A flaw was found in the Netfilter subsystem in the Linux kernel
CVE-2023-39193Medium· 6.1A flaw was found in the Netfilter subsystem in the Linux kernel
CVE-2023-42755Medium· 6.5A flaw was found in the IPv4 Resource Reservation Protocol (RSVP) classifier in the Linux kernel
CVE-2023-3773Medium· 5.5A flaw was found in the Linux kernel’s IP framework for transforming packets (XFRM subsystem)