Analytical use of cookies
CVE-2023-6121CVSS 4.3Linux
CVE-2023-6121: enterprise linux vulnerability
An out-of-bounds read vulnerability was found in the NVMe-oF/TCP subsystem in the Linux kernel. This issue may allow a remote attacker to send a crafted TCP packet, triggering a heap-based buffer overflow that results in kmalloc data being printed and potentially leaked to the kernel ring buffer (dmesg).
- CVSS
- 4.3 MEDIUM
- EPSS
- 73.77%
- Активно використовується
- немає в KEV
- Продукт
- enterprise linux
Що відомо
An out-of-bounds read vulnerability was found in the NVMe-oF/TCP subsystem in the Linux kernel. This issue may allow a remote attacker to send a crafted TCP packet, triggering a heap-based buffer overflow that results in kmalloc data being printed and potentially leaked to the kernel ring buffer (dmesg).