Analytical use of cookies
CVE-2023-6238CVSS 6.7Linux
CVE-2023-6238: linux kernel vulnerability
A buffer overflow vulnerability was found in the NVM Express (NVMe) driver in the Linux kernel. Only privileged user could specify a small meta buffer and let the device perform larger Direct Memory Access (DMA) into the same buffer, overwriting unrelated kernel memory, causing random kernel crashes and memory corruption.
- CVSS
- 6.7 MEDIUM
- EPSS
- 20.83%
- Активно використовується
- немає в KEV
- Продукт
- linux kernel
Що відомо
A buffer overflow vulnerability was found in the NVM Express (NVMe) driver in the Linux kernel. Only privileged user could specify a small meta buffer and let the device perform larger Direct Memory Access (DMA) into the same buffer, overwriting unrelated kernel memory, causing random kernel crashes and memory corruption.