CVE-2023-6121: Kernel: nvme: info leak due to out-of-bounds read in nvmet_ctrl_find_get

Severity: medium (CVSS 4.3 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2023-11-16 · updated 2026-10-14
Weakness: CWE-125

Description

An out-of-bounds read vulnerability was found in the NVMe-oF/TCP subsystem in the Linux kernel. This issue may allow a remote attacker to send a crafted TCP packet, triggering a heap-based buffer overflow that results in kmalloc data being printed and potentially leaked to the kernel ring buffer (dmesg).

Affected products

Red Hat Enterprise Linux: 6.0, 7.0, 8.0, 9.0

References

https://access.redhat.com/errata/RHSA-2024:2394
https://access.redhat.com/errata/RHSA-2024:2950
https://access.redhat.com/errata/RHSA-2024:3138
https://access.redhat.com/security/cve/CVE-2023-6121
https://bugzilla.redhat.com/show_bug.cgi?id=2250043
https://access.redhat.com/errata/RHSA-2024:2394
https://access.redhat.com/errata/RHSA-2024:2950
https://access.redhat.com/errata/RHSA-2024:3138
https://access.redhat.com/security/cve/CVE-2023-6121
https://bugzilla.redhat.com/show_bug.cgi?id=2250043
https://lists.debian.org/debian-lts-announce/2024/01/msg00005.html
https://cert-portal.siemens.com/productcert/html/ssa-265688.html

Get alerted when CVE-2023-6121 or the next vulnerability affects your stack