CVE-2023-6535

linux kernel, redhat codeready linux builder eus, redhat codeready linux builder eus for power little endian eus +13 lainnya

TLP:CLEAR

csirt@kutim:~/threat-intel/cve/CVE-2023-6535

Katalog CVE

CVSS 7.5 · High EPSS 1,5%

Kerentanan NULL Pointer Dereference pada linux kernel, redhat codeready linux builder eus +14 lainnya. Skor CVSS 3.1 7.5 (High) menurut NVD.

Deskripsi (NVD)

A flaw was found in the Linux kernel's NVMe driver. This issue may allow an unauthenticated malicious actor to send a set of crafted TCP packages when using NVMe over TCP, leading the NVMe driver to a NULL pointer dereference in the NVMe driver, causing kernel panic and a denial of service.

Rincian

Terbit di NVD
7 Februari 2024
Terakhir diubah
17 Juni 2026
Status NVD
Modified
CVSS 3.1
7.5 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator
Jenis kelemahan (CWE)
CWE-476: NULL Pointer Dereference
EPSS (30 hari)
1,5% peluang dieksploitasi; lebih tinggi dari 74,4% CVE lain

Produk dan versi terdampak

VendorProdukVersi terdampak
linux linux kernel Semua versi
redhat codeready linux builder eus Versi 8.6
redhat codeready linux builder eus Versi 9.2
redhat codeready linux builder eus for power little endian eus Versi 8.6_ppc64le
redhat codeready linux builder eus for power little endian eus Versi 9.2_ppc64le
redhat codeready linux builder for arm64 eus Versi 8.6_aarch64
redhat codeready linux builder for arm64 eus Versi 9.2_aarch64
redhat codeready linux builder for ibm z systems eus Versi 9.2_s390x
redhat enterprise linux Versi 8.0
redhat enterprise linux Versi 9.0
redhat enterprise linux eus Versi 8.6
redhat enterprise linux eus Versi 9.2
redhat enterprise linux for arm 64 eus Versi 8.6_aarch64
redhat enterprise linux for arm 64 eus Versi 9.2_aarch64
redhat enterprise linux for ibm z systems eus Versi 8.6_s390x
redhat enterprise linux for ibm z systems eus Versi 9.2_s390x
redhat enterprise linux for power little endian eus Versi 8.6_ppc64le
redhat enterprise linux for power little endian eus Versi 9.2_ppc64le
redhat enterprise linux for real time Versi 9.2
redhat enterprise linux for real time for nfv Versi 9.2
redhat enterprise linux server aus Versi 8.6
redhat enterprise linux server aus Versi 9.2
redhat enterprise linux server for power little endian update services for sap solutions Versi 8.6_ppc64le
redhat enterprise linux server for power little endian update services for sap solutions Versi 9.2_ppc64le
redhat enterprise linux server tus Versi 8.6
redhat virtualization host Versi 4.0

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:10 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.