Dashboard / CVE-2023-6536

CVE-2023-6536

HIGH
MEDIUM Priority: 0.12 BB Relevance: 75/100
Published: 2024-02-07 Modified: 2026-11-05 First seen: 2026-11-05 Status: active

Attack Surface

Network Low Complexity No Auth No Interaction

CVSS Vector Breakdown

AV: Network
AC: Low
PR: None
UI: None
S: Unchanged
C: None
I: None
A: High

Description

A flaw was found in the Linux kernel's NVMe driver. This issue may allow an unauthenticated malicious actor to send a set of crafted TCP packages when using NVMe over TCP, leading the NVMe driver to a NULL pointer dereference in the NVMe driver, causing kernel panic and a denial of service.

Weakness Classification (1)

Affected Software (27)

VendorProductVersion
debian debian_linux 10.0
linux linux_kernel 5.0 – 5.4.268
redhat codeready_linux_builder_eus 8.6
redhat codeready_linux_builder_eus 9.2
redhat codeready_linux_builder_eus_for_power_little_endian_eus 8.6_ppc64le
redhat codeready_linux_builder_eus_for_power_little_endian_eus 9.2_ppc64le
redhat codeready_linux_builder_for_arm64_eus 8.6_aarch64
redhat codeready_linux_builder_for_arm64_eus 9.2_aarch64
redhat codeready_linux_builder_for_ibm_z_systems_eus 9.2_s390x
redhat enterprise_linux 8.0
redhat enterprise_linux 9.0
redhat enterprise_linux_eus 8.6
redhat enterprise_linux_eus 9.2
redhat enterprise_linux_for_arm_64_eus 8.6_aarch64
redhat enterprise_linux_for_arm_64_eus 9.2_aarch64
redhat enterprise_linux_for_ibm_z_systems_eus 8.6_s390x
redhat enterprise_linux_for_ibm_z_systems_eus 9.2_s390x
redhat enterprise_linux_for_power_little_endian_eus 8.6_ppc64le
redhat enterprise_linux_for_power_little_endian_eus 9.2_ppc64le
redhat enterprise_linux_for_real_time 9.2
redhat enterprise_linux_for_real_time_for_nfv 9.2
redhat enterprise_linux_server_aus 8.6
redhat enterprise_linux_server_aus 9.2
redhat enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions 8.6_ppc64le
redhat enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions 9.2_ppc64le
redhat enterprise_linux_server_tus 8.6
redhat virtualization_host 4.0

References & Advisories (13)

https://access.redhat.com/errata/RHSA-2024:0723
vendor-advisory x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2024:0724
vendor-advisory x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2024:0725
vendor-advisory x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2024:0881
vendor-advisory x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2024:0897
vendor-advisory x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2024:1248
vendor-advisory x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2024:2094
vendor-advisory x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2024:3810
vendor-advisory x_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=2254052
issue-tracking x_refsource_REDHAT

Bug Bounty Relevance

75 / 100
✓ Network accessible
✓ No authentication
✓ Low complexity
✓ No user interaction

CVSS Score

7.5 / 10.0 v3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS — Exploitation Probability

1.55%
Raw Score 0.015490
Percentile 75.2%
Date 2026-11-05

EPSS Trend

2026-11-05
0.01549
2026-11-04
0.01549

Intelligence Sources

mitre ref →
nvd ref →

External Links