VULNERABILITY INTELLIGENCE

CVE-2023-0122

CVSS score7.5 HIGH
EPSS probability1.31%
CISA KEVNot currently listed
Published2023-01-17
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Description

A NULL pointer dereference vulnerability in the Linux kernel NVMe functionality, in nvmet_setup_auth(), allows an attacker to perform a Pre-Auth Denial of Service (DoS) attack on a remote machine. Affected versions v6.0-rc1 to v6.0-rc3, fixed in v6.0-rc4.

Weakness classification

  • secalert@redhat.com: CWE-476
  • nvd@nist.gov: CWE-476

Primary references