A buffer overflow vulnerability was found in the NVM Express (NVMe) driver in the Linux kernel. Only privileged user could specify a small meta buffer and let the device perform larger Direct Memory Access (DMA) into the same buffer, overwriting unrelated kernel memory, causing random kernel crashes and memory corruption.
CVSS Details
- CVSS 3.1 Base Score: 6.7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Suse | — | Upgrade dtb-freescaleUpgrade kselftests-kmp-azureUpgrade dtb-amazonUpgrade kernel-azureUpgrade kernel-rt-vdsoUpgrade dlm-kmp-64kbUpgrade kernel-source-azureUpgrade ocfs2-kmp-azureUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-rt-extraUpgrade kernel-rt-optionalUpgrade dtb-appleUpgrade dtb-alteraUpgrade cluster-md-kmp-64kbUpgrade dtb-amdUpgrade kernel-syms-azureUpgrade ocfs2-kmp-64kbUpgrade kernel-rt_debugUpgrade kernel-64kb-optionalUpgrade kselftests-kmp-64kbUpgrade dtb-sprdUpgrade kernel-azure-extraUpgrade kernel-debug-develUpgrade ocfs2-kmp-defaultUpgrade dtb-allwinnerUpgrade dtb-broadcomUpgrade kernel-azure-optionalUpgrade kernel-kvmsmall-vdsoUpgrade kernel-source-rtUpgrade dtb-marvellUpgrade cluster-md-kmp-azureUpgrade kernel-default-vdsoUpgrade kernel-source-vanillaUpgrade kernel-devel-azureUpgrade dtb-exynosUpgrade kernel-debug-vdsoUpgrade kernel-rt_debug-livepatch-develUpgrade reiserfs-kmp-64kbUpgrade kernel-default-livepatchUpgrade kernel-default-develUpgrade kernel-obs-buildUpgrade kernel-sourceUpgrade dtb-caviumUpgrade kernel-azure-develUpgrade kernel-docs-htmlUpgrade cluster-md-kmp-rtUpgrade dtb-lgUpgrade gfs2-kmp-azureUpgrade kernel-64kbUpgrade kernel-rt_debug-develUpgrade kernel-64kb-extraUpgrade kernel-kvmsmall-develUpgrade kernel-develUpgrade gfs2-kmp-defaultUpgrade reiserfs-kmp-defaultUpgrade dlm-kmp-defaultUpgrade kernel-default-optionalUpgrade dtb-armUpgrade kselftests-kmp-rtUpgrade kernel-azure-livepatch-develUpgrade gfs2-kmp-64kbUpgrade dlm-kmp-rtUpgrade kernel-rtUpgrade dtb-apmUpgrade cluster-md-kmp-defaultUpgrade dtb-socionextUpgrade kernel-kvmsmallUpgrade kernel-syms-rtUpgrade kernel-devel-rtUpgrade kernel-default-base-rebuildUpgrade dtb-hisiliconUpgrade dtb-amlogicUpgrade kernel-zfcpdumpUpgrade kernel-debugUpgrade kernel-macrosUpgrade reiserfs-kmp-rtUpgrade kselftests-kmp-defaultUpgrade dtb-renesasUpgrade ocfs2-kmp-rtUpgrade kernel-defaultUpgrade dlm-kmp-azureUpgrade kernel-default-baseUpgrade kernel-docsUpgrade dtb-mediatekUpgrade dtb-qcomUpgrade kernel-default-livepatch-develUpgrade kernel-rt_debug-vdsoUpgrade kernel-debug-livepatch-develUpgrade gfs2-kmp-rtUpgrade dtb-xilinxUpgrade reiserfs-kmp-azureUpgrade kernel-64kb-livepatch-develUpgrade kernel-rt-develUpgrade kernel-64kb-develUpgrade kernel-symsUpgrade dtb-rockchipUpgrade dtb-nvidiaUpgrade kernel-obs-qaUpgrade kernel-default-extraUpgrade kernel-azure-vdsoUpgrade kernel-rt-livepatch-devel | Jun 24, 2024 | Nov 21, 2023 |
| Ubuntu | — | No solution exists | Jun 26, 2025 | Nov 21, 2023 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub