CVE-2023-6238
published 2023-11-21CVE-2023-6238: A buffer overflow vulnerability was found in the NVM Express (NVMe) driver in the Linux kernel. Only privileged user could specify a small meta buffer and let…
PriorityP431medium6.7CVSS 3.1
AVLACLPRHUINSUCHIHAH
EPSS
0.29%
21.0th percentile
A buffer overflow vulnerability was found in the NVM Express (NVMe) driver in the Linux kernel. Only privileged user could specify a small meta buffer and let the device perform larger Direct Memory Access (DMA) into the same buffer, overwriting unrelated kernel memory, causing random kernel crashes and memory corruption.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | — | — |
| fedoraproject | fedora | — | — |
CVSS provenance
nvdv3.16.7MEDIUMCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
osv6.7MEDIUM
vendor_debian6.7LOW
vendor_redhat6.7MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Kernel
nvme-pci: use sgls for all user requests if possible
kernel_security·2024-11-08·CVSS 6.7
CVE-2023-6238 [MEDIUM] nvme-pci: use sgls for all user requests if possible
nvme-pci: use sgls for all user requests if possible
If the device supports SGLs, use these for all user requests. This
format encodes the expected transfer length so it can catch short buffer
errors in a user command, whether it occurred accidently or maliciously.
For controllers that support SGL data mode, this is a viable mitigation
to CVE-2023-6238. For controllers that don't support SGLs, log a warning
in the passthrough path since not having the capability can corrupt
data if the interface is not used correctly.
Reviewed-by: Christoph Hellwig
Signed-off-by: Keith Busch
GHSA
GHSA-2j83-334m-g9w4: A buffer overflow vulnerability was found in the NVM Express (NVMe) driver in the Linux kernel
ghsa_unreviewed·2023-11-21
CVE-2023-6238 [HIGH] CWE-119 GHSA-2j83-334m-g9w4: A buffer overflow vulnerability was found in the NVM Express (NVMe) driver in the Linux kernel
A buffer overflow vulnerability was found in the NVM Express (NVMe) driver in the Linux kernel. An unprivileged user could specify a small meta buffer and let the device perform larger Direct Memory Access (DMA) into the same buffer, overwriting unrelated kernel memory, causing random kernel crashes and memory corruption.
OSV
CVE-2023-6238: A buffer overflow vulnerability was found in the NVM Express (NVMe) driver in the Linux kernel
osv·2023-11-21·CVSS 6.7
CVE-2023-6238 [MEDIUM] CVE-2023-6238: A buffer overflow vulnerability was found in the NVM Express (NVMe) driver in the Linux kernel
A buffer overflow vulnerability was found in the NVM Express (NVMe) driver in the Linux kernel. Only privileged user could specify a small meta buffer and let the device perform larger Direct Memory Access (DMA) into the same buffer, overwriting unrelated kernel memory, causing random kernel crashes and memory corruption.
Red Hat
kernel: nvme: memory corruption via unprivileged user passthrough
vendor_redhat·2023-10-13·CVSS 6.7
CVE-2023-6238 [MEDIUM] CWE-120 kernel: nvme: memory corruption via unprivileged user passthrough
kernel: nvme: memory corruption via unprivileged user passthrough
A buffer overflow vulnerability was found in the NVM Express (NVMe) driver in the Linux kernel. Only privileged user could specify a small meta buffer and let the device perform larger Direct Memory Access (DMA) into the same buffer, overwriting unrelated kernel memory, causing random kernel crashes and memory corruption.
A buffer overflow vulnerability was found in the NVM Express (NVMe) driver in the Linux kernel. Only privileged user could specify a small meta buffer and let the device perform larger Direct Memory Access (DMA) into the same buffer, overwriting unrelated kernel memory, causing random kernel crashes and memory corruption.
Statement: This CVE has been rated as having a security impact of Low because it re
Debian
CVE-2023-6238: linux - A buffer overflow vulnerability was found in the NVM Express (NVMe) driver in th...
vendor_debian·2023·CVSS 6.7
CVE-2023-6238 [MEDIUM] CVE-2023-6238: linux - A buffer overflow vulnerability was found in the NVM Express (NVMe) driver in th...
A buffer overflow vulnerability was found in the NVM Express (NVMe) driver in the Linux kernel. Only privileged user could specify a small meta buffer and let the device perform larger Direct Memory Access (DMA) into the same buffer, overwriting unrelated kernel memory, causing random kernel crashes and memory corruption.
Scope: local
bookworm: resolved
bullseye: resolved
forky: open
sid: open
trixie: open
No detection rules found.
No public exploits indexed.
2023-11-21
Published