CVE-2023-6535
Aliases:UBUNTU-CVE-2023-6535DEBIAN-CVE-2023-6535CGA-226m-hc2f-w9mhCGA-264j-6gp5-8h32CGA-2qf7-p3hg-f332CGA-2r28-3mf2-xxw4CGA-2rgj-pc92-cj6qCGA-2vwv-cm6f-r92fCGA-337x-q556-5fv5CGA-34wx-rg95-7rfjCGA-3fc2-rvm2-hx96CGA-3gh7-2m93-xw3pCGA-3m53-9ppv-2vq3CGA-3m5r-f382-ggr4CGA-3phj-qcpm-gvx9CGA-3vf9-xgw6-qq72CGA-3w4c-6f45-55m5CGA-449v-h5rf-chqxCGA-4g2g-r9hp-g8vxCGA-4mmx-738p-pgm3CGA-4mv2-w838-562wCGA-4p8v-mrxr-x4jrCGA-4qh9-hrhf-p5chCGA-4qxw-q3rm-w3grCGA-4x88-rxgq-9wpqCGA-4xrp-6p44-f6p4CGA-53vq-5g2p-wwf9CGA-557g-7mwq-8x67CGA-5m46-mcm4-43p8CGA-5pxg-2cp9-jwqqCGA-67c7-v35m-jpf7CGA-6c95-g48w-hm63CGA-6x2j-29jw-3fgpCGA-6x2m-6w78-r569CGA-6xvr-qf9r-jgcfCGA-7398-6jrh-74g7CGA-73rm-5r7j-8mh3CGA-74qx-c7p8-h4m5CGA-7c6x-3qf9-rf6pCGA-7v9w-5fxc-j37hCGA-7wq5-p45m-3vpvCGA-83jh-qh8h-g5v6CGA-899r-mxr8-h96xCGA-89gw-59mc-c22hCGA-8c52-fq2c-2p7fCGA-8f7w-rvmx-9r96CGA-8m84-77jv-hr38CGA-8mr2-6f5w-xw9gCGA-8qr4-89gq-6rm3CGA-8xxh-g2r2-fjjmCGA-924p-8vfh-63jpCGA-9729-5j86-rfmhCGA-996g-7j5h-vqq8CGA-9fjm-vjx5-93m3CGA-9g45-g7h7-33vcCGA-9gmw-w85f-mww6CGA-9mwc-g745-xfqhCGA-9q52-prff-73chCGA-c44m-c7gh-jwv6CGA-c5wp-fc29-p399CGA-c7gh-cg69-rx23CGA-c8h6-6gjv-2hc9CGA-c94h-g348-w4vxCGA-cmr4-c3qp-q695CGA-cqqw-m659-frqwCGA-cw4x-89q8-9h2hCGA-cwjm-2prh-6352CGA-f9pp-fvv4-hrq8CGA-fc9r-996h-4vp2CGA-fr39-54p6-7mh8CGA-g6w7-4f55-7r25CGA-g9jv-8x48-fmhqCGA-g9pw-5ff3-c8cwCGA-gfxf-v53q-hx5qCGA-gh2q-h5r2-86hwCGA-grxg-gg4w-vw23CGA-gw66-3gp3-cf48CGA-h23q-mfvm-q958CGA-h6m3-3xwf-996vCGA-h6qp-58m9-9jxgCGA-h7xj-rq3w-q9w8CGA-h838-gpwm-3wpjCGA-h8p8-5r29-5f57CGA-hcj9-q477-h5wcCGA-hf77-ggwm-9cffCGA-hgh8-59mg-xjhjCGA-hghj-5v6v-54qjCGA-hj6r-q384-3vq8CGA-hq8g-x662-9f5vCGA-hwq6-5f5c-x7pfCGA-hxg5-72qm-556xCGA-j8wr-7cvx-mr44CGA-jchr-w9hq-x97wCGA-jjc6-xv53-p375CGA-jpp8-rg4v-6fwwCGA-jwxr-44gp-vvvqCGA-jx2m-jfjv-gqvgCGA-m34v-qg24-868fCGA-m4qp-63jv-39fgCGA-mh2x-vpjq-f54jCGA-mpmg-65f5-jmjjCGA-mq45-4r8p-rmv4CGA-mqc7-64jf-h2h7CGA-p3m6-6hfq-gc8pCGA-pr6x-23x7-2g2pCGA-qhhg-r9qq-xc8xCGA-qprg-84c4-c37fCGA-qqhq-fgrp-3xcvCGA-qvvh-7ph3-f3rmCGA-qxgg-h62w-wp7jCGA-rfr9-7vgh-m793CGA-rx68-3c77-gfjhCGA-v226-f729-2wrpCGA-v2j8-wvpm-3qgwCGA-v3hm-fqjg-3h26CGA-v6fm-w84x-jmh4CGA-v7r9-mr2m-mv3gCGA-vmj4-fqfq-7pcvCGA-vxrp-75wg-cqv4CGA-w36q-j385-gc9qCGA-w457-rx3x-vxppCGA-w73w-3pg3-rqx3CGA-wgj6-wwrq-pg42CGA-wgvp-cmr7-x658CGA-ww95-46c6-5qc3CGA-wx99-fpqf-7c32CGA-wxch-5q72-5w8cCGA-wxrg-w5p7-x87wCGA-x72h-f4pq-r6qrCGA-x9fv-9ppj-j235CGA-xgrh-262h-w53pCGA-xmq8-f5c8-4f9fCGA-xp4j-38v8-rhfxCGA-c9w4-qqj9-8fccCGA-q5h4-4722-jqh7CGA-288j-2wj2-4jmvCGA-2c6m-2mqq-m525CGA-37rj-x995-45c6CGA-463j-5phc-hmjmCGA-64h7-9856-mr29CGA-7gfp-c24c-99m8CGA-7wwg-fwrv-2g5jCGA-8fwc-jwp9-3wr6CGA-9x2r-96rx-72h9CGA-jv6w-hrwj-86g4CGA-qccr-wwqx-44f7CGA-v84j-2r2f-gjcxCGA-x3c9-h37m-6qwpCGA-xgmm-hvmv-56h7CGA-c264-gpwp-2xq2CGA-fm54-r933-p2fhCGA-fp78-cp42-wpx6CGA-p64x-6758-qgmfCGA-rp6c-xp75-j4r7CGA-489x-xjmx-w5prCGA-8v8m-2p3v-vc4cCGA-72v5-q4gm-3mhgCGA-8hv6-jwv8-xjhfCGA-96rr-j878-hv26
Advisory lineage Upstream: 0 Downstream: 37
Modified
Published: 07 Feb 2024, 21:04
Last modified:06 Nov 2025, 21:45
Vulnerability Summary
Overall Risk (default)
medium
30/100 CVSS Score
7.5 HIGH
v3.1 (nvd)
EPSS Score
1.55% LOW
2% probability +1.52%
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected
Timeline
07 Feb 2024, 21:04
Published
Vulnerability first disclosed
06 Nov 2025, 21:45
Last Modified
Vulnerability information updated
Description
A flaw was found in the Linux kernel's NVMe driver. This issue may allow an unauthenticated malicious actor to send a set of crafted TCP packages when using NVMe over TCP, leading the NVMe driver to a NULL pointer dereference in the NVMe driver, causing kernel panic and a denial of service.
CVSS Metrics
- v3.1•MEDIUM•Score: 6.5CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
- v3.1•HIGH•Score: 7.5CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS Trends
Current EPSS score: 1.55%• Percentile: 74%
Techniques & Countermeasures
- CWE-476•NULL Pointer Dereference
The product dereferences a pointer that it expects to be valid but is NULL.
Affected Systems
- chainguard•hyperv-daemons-6.18
< 0
- chainguard•hyperv-daemons-generic
< 0
- chainguard•linux-aws-6.12
< 6.12.65-r0 | < 0
- chainguard•linux-aws-6.12-boot-installed
< 0
- chainguard•linux-aws-6.12-fips-boot-installed
< 0
- chainguard•linux-aws-6.12-headers
< 0
- chainguard•linux-aws-6.12-modules
< 0
- chainguard•linux-aws-6.18
< 0 | < 6.18.10-r0
- chainguard•linux-aws-6.18-boot-installed
< 0
- chainguard•linux-aws-6.18-fips-boot-installed
< 0
- chainguard•linux-aws-6.18-headers
< 0
- chainguard•linux-aws-6.18-modules
< 0
- chainguard•linux-aws-generic
< 6.18.5-r0 | < 0
- chainguard•linux-aws-generic-boot-installed
< 0
- chainguard•linux-aws-generic-fips-boot-installed
< 0
- chainguard•linux-aws-generic-headers
< 0
- chainguard•linux-aws-generic-modules
< 0
- chainguard•linux-azure-6.12
< 6.12.65-r1 | < 0
- chainguard•linux-azure-6.18
< 0
- chainguard•linux-azure-6.18-boot-installed
< 0
- chainguard•linux-azure-6.18-fips-boot-installed
< 0
- chainguard•linux-azure-6.18-headers
< 0
- chainguard•linux-azure-6.18-modules
< 0
- chainguard•linux-azure-generic
< 0 | < 6.18.5-r0
- chainguard•linux-azure-generic-boot-installed
< 0
- chainguard•linux-azure-generic-fips-boot-installed
< 0
- chainguard•linux-azure-generic-headers
< 0
- chainguard•linux-azure-generic-modules
< 0
- chainguard•linux-desktop-6.18
all
- chainguard•linux-desktop-6.18-bootc
all
- chainguard•linux-desktop-6.18-bootc-boot-installed
all
- chainguard•linux-desktop-6.18-headers
all
- chainguard•linux-desktop-6.18-modules
all
- chainguard•linux-desktop-7.2
all
- chainguard•linux-desktop-7.2-bootc
all
- chainguard•linux-desktop-7.2-headers
all
- chainguard•linux-desktop-7.2-modules
all
- chainguard•linux-firecracker-6.18
all
- chainguard•linux-gcp-6.12
< 6.12.65-r0 | < 0
- chainguard•linux-gcp-6.18
< 6.18.10-r0 | < 0
- chainguard•linux-gcp-6.18-boot-installed
< 0
- chainguard•linux-gcp-6.18-fips-boot-installed
< 0
- chainguard•linux-gcp-6.18-headers
< 0
- chainguard•linux-gcp-6.18-modules
< 0
- chainguard•linux-gcp-generic
< 6.18.5-r0 | < 0
- chainguard•linux-gcp-generic-boot-installed
< 0
- chainguard•linux-gcp-generic-fips-boot-installed
< 0
- chainguard•linux-gcp-generic-headers
< 0
- chainguard•linux-gcp-generic-modules
< 0
- chainguard•linux-qemu-6.12
< 6.12.71-r0 | < 6.12.77-r1 | < 6.12.67-r0 | < 6.12.77-r0 | < 6.12.77-r2 | < 6.12.69-r0 | < 6.12.74-r1 | < 6.12.70-r0 | < 6.12.65-r1 | < 6.12.78-r0 | < 6.12.76-r0 | < 6.12.72-r0 | < 6.12.65-r2 | < 6.12.68-r0 | < 6.12.80-r0 | < 6.12.66-r0 | < 6.12.74-r0
Showing first 50 affected entries in server-rendered view.
References (25)
- https://access.redhat.com/errata/RHSA-2024:0723
- https://access.redhat.com/errata/RHSA-2024:0724
- https://access.redhat.com/errata/RHSA-2024:0725
- https://access.redhat.com/errata/RHSA-2024:0881
- https://access.redhat.com/errata/RHSA-2024:0897
- https://access.redhat.com/errata/RHSA-2024:1248
- https://access.redhat.com/errata/RHSA-2024:2094
- https://access.redhat.com/errata/RHSA-2024:3810
- https://access.redhat.com/security/cve/CVE-2023-6535
- https://bugzilla.redhat.com/show_bug.cgi?id=2254053
- https://lists.debian.org/debian-lts-announce/2024/06/msg00016.html
- https://security.netapp.com/advisory/ntap-20240415-0003/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZFYW6R64GPLUOXSQBJI3JBUX3HGLAYPP/
- https://ubuntu.com/security/CVE-2023-6535
- https://lore.kernel.org/linux-nvme/89a927a6-2baf-434a-b1d5-50fb99beca73@grimberg.me/T/#t
- https://www.cve.org/CVERecord?id=CVE-2023-6535
- https://ubuntu.com/security/notices/USN-6818-1
- https://ubuntu.com/security/notices/USN-6819-1
- https://ubuntu.com/security/notices/USN-6818-2
- https://ubuntu.com/security/notices/USN-6819-2
- https://ubuntu.com/security/notices/USN-6819-3
- https://ubuntu.com/security/notices/USN-6818-3
- https://ubuntu.com/security/notices/USN-6818-4
- https://ubuntu.com/security/notices/USN-6819-4
- https://security-tracker.debian.org/tracker/CVE-2023-6535