Yüksek CVSS 7.5
CVE-2023-6356: Codeready Linux Builder Eus: NULL işaretçi başvurusu
Açıklama (NVD)
A flaw was found in the Linux kernel's NVMe driver. This issue may allow an unauthenticated malicious actor to send a set of crafted TCP packages when using NVMe over TCP, leading the NVMe driver to a NULL pointer dereference in the NVMe driver and causing kernel panic and a denial of service.
Özet bilgiler
- Ürün
- Redhat Codeready Linux Builder Eus
- CVSS v3.1
- 7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - EPSS
- %1,46 (yüzdelik 74)
- CWE
- CWE-476
- Yama
- Yok / bilinmiyor
Etkilenen sürümler
| Ürün | Başlangıç | Bitiş | Düzeltildi |
|---|---|---|---|
| redhat-codeready-linux-builder-eus | 8.6 | 8.6 | — |
| redhat-codeready-linux-builder-eus | 9.2 | 9.2 | — |
| redhat-codeready-linux-builder-eus-for-power-little-endian-eus | 8.6_ppc64le | 8.6_ppc64le | — |
| redhat-codeready-linux-builder-eus-for-power-little-endian-eus | 9.2_ppc64le | 9.2_ppc64le | — |
| redhat-codeready-linux-builder-for-arm64-eus | 8.6_aarch64 | 8.6_aarch64 | — |
| redhat-codeready-linux-builder-for-arm64-eus | 9.2_aarch64 | 9.2_aarch64 | — |
| redhat-codeready-linux-builder-for-ibm-z-systems-eus | 9.2_s390x | 9.2_s390x | — |
| redhat-enterprise-linux | 8.0 | 8.0 | — |
| redhat-enterprise-linux | 9.0 | 9.0 | — |
| redhat-enterprise-linux-eus | 8.6 | 8.6 | — |
| redhat-enterprise-linux-eus | 9.2 | 9.2 | — |
| redhat-enterprise-linux-for-arm-64-eus | 8.6_aarch64 | 8.6_aarch64 | — |
| redhat-enterprise-linux-for-arm-64-eus | 9.2_aarch64 | 9.2_aarch64 | — |
| redhat-enterprise-linux-for-ibm-z-systems-eus | 8.6_s390x | 8.6_s390x | — |
| redhat-enterprise-linux-for-ibm-z-systems-eus | 9.2_s390x | 9.2_s390x | — |
| redhat-enterprise-linux-for-power-little-endian-eus | 8.6_ppc64le | 8.6_ppc64le | — |
| redhat-enterprise-linux-for-power-little-endian-eus | 9.2_ppc64le | 9.2_ppc64le | — |
| redhat-enterprise-linux-for-real-time | 9.2 | 9.2 | — |
| redhat-enterprise-linux-for-real-time-for-nfv | 9.2 | 9.2 | — |
| redhat-enterprise-linux-server-aus | 8.6 | 8.6 | — |
| redhat-enterprise-linux-server-aus | 9.2 | 9.2 | — |
| redhat-enterprise-linux-server-for-power-little-endian-update-services-for-sap-solutions | 8.6_ppc64le | 8.6_ppc64le | — |
| redhat-enterprise-linux-server-for-power-little-endian-update-services-for-sap-solutions | 9.2_ppc64le | 9.2_ppc64le | — |
| redhat-enterprise-linux-server-tus | 8.6 | 8.6 | — |
| redhat-virtualization-host | 4.0 | 4.0 | — |
| linux-linux-kernel | 5.0 | — | 5.4.268 |
| linux-linux-kernel | 5.5 | — | 5.10.209 |
| linux-linux-kernel | 5.11 | — | 5.15.148 |
| linux-linux-kernel | 5.16 | — | 6.1.75 |
| linux-linux-kernel | 6.2 | — | 6.6.14 |
Kaynaklar
- NVD kaydı
- access.redhat.com
- access.redhat.com
- access.redhat.com
- access.redhat.com
- access.redhat.com
- access.redhat.com
- access.redhat.com
- access.redhat.com
- access.redhat.com
- bugzilla.redhat.com
- access.redhat.com
- access.redhat.com
- access.redhat.com
- access.redhat.com
- access.redhat.com
- access.redhat.com
- access.redhat.com
- access.redhat.com
- access.redhat.com
- bugzilla.redhat.com
- lists.debian.org
- lists.fedoraproject.org
- security.netapp.com
- CWE-476