CVE-2023-6238

CVSS V2 None CVSS V3 None

Description

A buffer overflow vulnerability was found in the NVM Express (NVMe) driver in the Linux kernel. Only privileged user could specify a small meta buffer and let the device perform larger Direct Memory Access (DMA) into the same buffer, overwriting unrelated kernel memory, causing random kernel crashes and memory corruption.

Overview

CVE ID
CVE-2023-6238

Assigner
redhat

Vulnerability Status
PUBLISHED

Published Version
2023-11-21T20:21:20.625Z

Last Modified Date
2024-02-06T23:30:20.019Z

Weakness Enumerations

CWE	URL
CWE-120	http://cwe.mitre.org/data/definitions/120.html

References

Reference URL	Reference Tags
https://access.redhat.com/security/cve/CVE-2023-6238	vdb-entry x_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=2250834	issue-tracking x_refsource_REDHAT

Sources

Source Name	Source URL
NIST	https://nvd.nist.gov/vuln/detail/CVE-2023-6238
MITRE	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6238

History

Created	Old Value	New Value	Data Type	Notes
2024-06-25 06:31:49				Added to TrackCVE