A flaw was found in the Linux kernel's NVMe driver. This issue may allow an unauthenticated malicious actor to send a set of crafted TCP packages when using NVMe over TCP, leading the NVMe driver to a NULL pointer dereference in the NVMe driver and causing kernel panic and a
A flaw was found in the Linux kernel's NVMe driver. This issue may allow an unauthenticated malicious actor to send a set of crafted TCP packages when using NVMe over TCP, leading the NVMe driver to a NULL pointer dereference in the NVMe driver and causing kernel panic and a denial of service.
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | Red Hat Enterprise Linux 8 | 0:4.18.0-513.18.1.rt7.320.el8_9 |
| Red Hat | Red Hat Enterprise Linux 8 | 0:4.18.0-513.18.1.el8_9 |
| Red Hat | Red Hat Enterprise Linux 8.6 Extended Update Support | 0:4.18.0-372.91.1.el8_6 |
| Red Hat | Red Hat Enterprise Linux 8.8 Extended Update Support | 0:4.18.0-477.58.1.el8_8 |
| Red Hat | Red Hat Enterprise Linux 9 | 0:5.14.0-362.24.1.el9_3 |
| Red Hat | Red Hat Enterprise Linux 9 | 0:5.14.0-362.24.1.el9_3 |
| Red Hat | Red Hat Enterprise Linux 9.2 Extended Update Support | 0:5.14.0-284.52.1.el9_2 |
| Red Hat | Red Hat Enterprise Linux 9.2 Extended Update Support | 0:5.14.0-284.52.1.rt14.337.el9_2 |
| Red Hat | Red Hat Virtualization 4 for Red Hat Enterprise Linux 8 | 0:4.18.0-372.91.1.el8_6 |
| Red Hat | RHOL | 5.8-RHEL-9 — v5.8.6-22 |
| Red Hat | RHOL | 5.8-RHEL-9 — v5.8.6-11 |
| Red Hat | RHOL | 5.8-RHEL-9 — v6.8.1-407 |
| Red Hat | RHOL | 5.8-RHEL-9 — v5.8.6-19 |
| Red Hat | RHOL | 5.8-RHEL-9 — v1.0.0-479 |
| Red Hat | RHOL | 5.8-RHEL-9 — v5.8.6-7 |
| Red Hat | RHOL | 5.8-RHEL-9 — v0.4.0-247 |
| Red Hat | RHOL | 5.8-RHEL-9 — v5.8.6-5 |
| Red Hat | RHOL | 5.8-RHEL-9 — v1.1.0-227 |
| Red Hat | RHOL | 5.8-RHEL-9 — v5.8.1-470 |
| Red Hat | RHOL | 5.8-RHEL-9 — v2.9.6-14 |
| Red Hat | RHOL | 5.8-RHEL-9 — v5.8.6-2 |
| Red Hat | RHOL | 5.8-RHEL-9 — v5.8.6-24 |
| Red Hat | RHOL | 5.8-RHEL-9 — v5.8.6-10 |
| Red Hat | RHOL | 5.8-RHEL-9 — v0.1.0-525 |
| Red Hat | RHOL | 5.8-RHEL-9 — v0.1.0-224 |
| Red Hat | RHOL | 5.8-RHEL-9 — v0.28.1-56 |
| Red Hat | Red Hat Enterprise Linux 6 | unspecified |
| Red Hat | Red Hat Enterprise Linux 7 | unspecified |
| Red Hat | Red Hat Enterprise Linux 7 | unspecified |
| Red Hat | Red Hat Enterprise Linux 9 | unspecified |
Not currently listed on the CISA Known Exploited Vulnerabilities (KEV) catalog. EPSS is the best forward-looking signal — see the EPSS row above.
For the full vendor write-up, exploit chains, and reference implementations, see the references list in section 09.
Ask SARA in chat to draft a starting detection for this CVE in your stack of choice.
No directly-cited follow-up CVEs in the KB record for this advisory. The references list in section 09 carries the vendor cross-references.