Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2023-6238HistoryNov 21, 2023 - 9:15 p.m.
CVE-2023-6238
2023-11-2121:15:09
Debian Security Bug Tracker
security-tracker.debian.org
13
cve-2023-6238
nvm express driver
buffer overflow
linux kernel
privileged user
meta buffer
direct memory access
dma
memory corruption
kernel crashes
vulnerability
unix
A buffer overflow vulnerability was found in the NVM Express (NVMe) driver in the Linux kernel. Only privileged user could specify a small meta buffer and let the device perform larger Direct Memory Access (DMA) into the same buffer, overwriting unrelated kernel memory, causing random kernel crashes and memory corruption.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | linux | < 6.1.76-1 | linux_6.1.76-1_all.deb |
| Debian | 11 | all | linux | < 5.10.209-2 | linux_5.10.209-2_all.deb |
| Debian | 10 | all | linux | < 4.19.249-2 | linux_4.19.249-2_all.deb |
| Debian | 999 | all | linux | <= 6.8.11-1 | linux_6.8.11-1_all.deb |
| Debian | 13 | all | linux | <= 6.7.12-1 | linux_6.7.12-1_all.deb |
Related
cvelist
cvelist
prion
prion
Buffer overflow
2023-11-21 21:15:00
ubuntucve
ubuntucve
CVE-2023-6238
2023-11-21 00:00:00
cve
cve
CVE-2023-6238
2023-11-21 21:15:09
redhatcve
redhatcve
CVE-2023-6238
2023-11-21 16:22:31