CVSS 3.1 Score 6.7 of 10 (medium)


Published Nov 21, 2023
Updated: Feb 7, 2024
CWE ID 120


CVE-2023-6238 is a buffer overflow vulnerability found in the NVM Express (NVMe) driver in the Linux kernel. This vulnerability allows a privileged user to specify a small meta buffer and perform larger Direct Memory Access (DMA) into the same buffer, resulting in overwriting unrelated kernel memory. As a result, random kernel crashes and memory corruption can occur. The affected products include those using the s5UiRj and eCJhJy interfaces. To remediate this vulnerability, it is recommended to apply the latest patches and updates provided by the Linux kernel developers. The potential danger of this vulnerability lies in its ability to allow an attacker with elevated privileges to crash the kernel, potentially leading to system instability or unauthorized access to sensitive information.

Explore Beyond the CVE Basics with Recorded Future's Vulnerability Intelligence

Note: This is just a basic overview providing quick insights into CVE-2023-6238 information. Gain full access to comprehensive CVE data, risk scores, prioritization, and mitigation data through Recorded Future's Vulnerability Intelligence:
  • Prioritize with Risk-Based Scoring
  • Explore the Extensive Vulnerability Database
  • Receive Early Alerts on Emerging CVEs
  • Focus on Critical Exploitable Vulnerabilities
  • Streamline Remediation with Integration Options