Vulnerabilities > CVE-2023-0122 - NULL Pointer Dereference vulnerability in Linux Kernel 6.0

047910
CVSS 7.5 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
NONE
Integrity impact
NONE
Availability impact
HIGH
network
low complexity
linux
CWE-476
NVD
Published: 2023-01-17
Updated: 2024-11-21

Summary

A NULL pointer dereference vulnerability in the Linux kernel NVMe functionality, in nvmet_setup_auth(), allows an attacker to perform a Pre-Auth Denial of Service (DoS) attack on a remote machine. Affected versions v6.0-rc1 to v6.0-rc3, fixed in v6.0-rc4.

Vulnerable Configurations

Part Description Count
OS
Linux
3

Common Weakness Enumeration (CWE)

References