Lucene search
Redhat.comRH:CVE-2023-6238HistoryNov 21, 2023 - 4:22 p.m.
CVE-2023-6238
2023-11-2116:22:31
redhat.com
access.redhat.com
12
buffer overflow
nvme driver
privileged user
kernel memory
crashes
memory corruption
red hat
mitigation option
A buffer overflow vulnerability was found in the NVM Express (NVMe) driver in the Linux kernel. Only privileged user could specify a small meta buffer and let the device perform larger Direct Memory Access (DMA) into the same buffer, overwriting unrelated kernel memory, causing random kernel crashes and memory corruption.
Mitigation
Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
Related
cvelist
cvelist
prion
prion
Buffer overflow
2023-11-21 21:15:00
ubuntucve
ubuntucve
CVE-2023-6238
2023-11-21 00:00:00
cve
cve
CVE-2023-6238
2023-11-21 21:15:09
debiancve
debiancve
CVE-2023-6238
2023-11-21 21:15:09