• caglararli@hotmail.com
  • 05386281520

CVE-2023-52454 | Linux Kernel up to 6.7.1 nvmet-tcp nvmet_tcp_build_pdu_iovec null pointer dereference

Çağlar Arlı      -    12 Views

CVE-2023-52454 | Linux Kernel up to 6.7.1 nvmet-tcp nvmet_tcp_build_pdu_iovec null pointer dereference

A vulnerability, which was classified as critical, was found in Linux Kernel up to 6.7.1. Affected is the function nvmet_tcp_build_pdu_iovec of the component nvmet-tcp. The manipulation leads to null pointer dereference. This vulnerability is traded as CVE-2023-52454. The attack can only be done within the local network. There is no exploit available. It is recommended to upgrade the affected component.