A buffer overflow vulnerability was found in the NVM Express (NVMe) driver in the Linux kernel. Only privileged user could specify a small meta buffer and let the device perform larger Direct Memory Access (DMA) into the same buffer, overwriting unrelated kernel memory, causing random kernel crashes and memory corruption.
CVSS Details
- CVSS 3.1 Base Score: 6.7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Suse | — | Upgrade dtb-amdUpgrade dtb-caviumUpgrade kernel-64kb-extraUpgrade kernel-default-vdsoUpgrade kernel-develUpgrade dtb-alteraUpgrade gfs2-kmp-defaultUpgrade ocfs2-kmp-azureUpgrade cluster-md-kmp-rtUpgrade kernel-sourceUpgrade dlm-kmp-64kbUpgrade dtb-freescaleUpgrade kernel-kvmsmall-develUpgrade kernel-azureUpgrade kernel-rt-optionalUpgrade dtb-amazonUpgrade kselftests-kmp-azureUpgrade kernel-rt-extraUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-source-azureUpgrade kernel-syms-azureUpgrade ocfs2-kmp-64kbUpgrade gfs2-kmp-azureUpgrade cluster-md-kmp-64kbUpgrade cluster-md-kmp-azureUpgrade dtb-appleUpgrade kselftests-kmp-64kbUpgrade kernel-rt-vdsoUpgrade kernel-debug-vdsoUpgrade kernel-obs-buildUpgrade kernel-64kb-optionalUpgrade kernel-rt_debugUpgrade kernel-64kbUpgrade dtb-broadcomUpgrade dtb-allwinnerUpgrade dtb-sprdUpgrade kernel-azure-optionalUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-debug-develUpgrade kernel-source-rtUpgrade reiserfs-kmp-64kbUpgrade kernel-azure-extraUpgrade ocfs2-kmp-defaultUpgrade dtb-marvellUpgrade kernel-default-develUpgrade kernel-devel-azureUpgrade kernel-default-livepatchUpgrade dtb-exynosUpgrade kernel-kvmsmall-vdsoUpgrade kernel-source-vanillaUpgrade kernel-azure-develUpgrade dtb-lgUpgrade kernel-docs-htmlUpgrade kernel-rt_debug-develUpgrade dtb-socionextUpgrade kernel-rt_debug-vdsoUpgrade dtb-amlogicUpgrade ocfs2-kmp-rtUpgrade dlm-kmp-defaultUpgrade kernel-default-optionalUpgrade kernel-defaultUpgrade dtb-xilinxUpgrade dtb-qcomUpgrade dtb-armUpgrade cluster-md-kmp-defaultUpgrade kernel-rtUpgrade dtb-apmUpgrade reiserfs-kmp-rtUpgrade dlm-kmp-rtUpgrade reiserfs-kmp-defaultUpgrade kernel-rt-develUpgrade kernel-default-baseUpgrade kernel-azure-livepatch-develUpgrade gfs2-kmp-64kbUpgrade dlm-kmp-azureUpgrade kselftests-kmp-rtUpgrade kernel-rt-livepatch-develUpgrade kernel-default-livepatch-develUpgrade kernel-devel-rtUpgrade kernel-default-base-rebuildUpgrade dtb-hisiliconUpgrade kernel-syms-rtUpgrade dtb-renesasUpgrade kernel-zfcpdumpUpgrade kselftests-kmp-defaultUpgrade kernel-64kb-livepatch-develUpgrade dtb-mediatekUpgrade kernel-obs-qaUpgrade kernel-64kb-develUpgrade dtb-rockchipUpgrade kernel-symsUpgrade kernel-azure-vdsoUpgrade kernel-default-extraUpgrade dtb-nvidiaUpgrade kernel-docsUpgrade reiserfs-kmp-azureUpgrade kernel-macrosUpgrade kernel-kvmsmallUpgrade kernel-debugUpgrade kernel-debug-livepatch-develUpgrade gfs2-kmp-rt | Jun 24, 2024 | Nov 21, 2023 |
| Ubuntu | — | No solution exists | Jun 26, 2025 | Nov 21, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub