RHSA-2023:7370Vendor advisory
https://access.redhat.com/errata/RHSA-2023:7370 CVE-2023-5178
HIGH
Kernel: use after free in nvmet_tcp_free_crypto in nvme
Record summary
CVE-2023-5178 has a selected CVSS score of 8.8 (high); EIP currently links 1 repository PoC.
Description
A use-after-free vulnerability was found in drivers/nvme/target/tcp.c` in `nvmet_tcp_free_crypto` due to a logical bug in the NVMe/TCP subsystem in the Linux kernel. This issue may allow a malicious user to cause a use-after-free and double-free problem, which may permit remote code execution or lead to local privilege escalation.
Description source: CVE List
Exploitation context
Available material
- Repository PoCs
- 1
Affected products and versions
Showing 12 of 30| Product | Source | Version range | Status |
|---|---|---|---|
Default status: unaffected | CVE List | Version data not supplied | |
Default status: unaffected | CVE List | Version data not supplied | |
Default status: unaffected | CVE List | Version data not supplied | |
Default status: affected | CVE List | 0:4.18.0-513.9.1.el8_9 to < * | unaffected |
Default status: affected | CVE List | 0:4.18.0-513.9.1.rt7.311.el8_9 to < * | unaffected |
Default status: unaffected | CVE List | Version data not supplied | |
Red Hat Enterprise Linux 8.2 Advanced Update SupportBrowse Red Hat / Red Hat Enterprise Linux 8.2 Advanced Update SupportkernelDefault status: affected | CVE List | 0:4.18.0-193.128.1.el8_2 to < * | unaffected |
Red Hat Enterprise Linux 8.2 Telecommunications Update ServiceBrowse Red Hat / Red Hat Enterprise Linux 8.2 Telecommunications Update ServicekernelDefault status: affected | CVE List | 0:4.18.0-193.128.1.el8_2 to < * | unaffected |
Red Hat Enterprise Linux 8.2 Telecommunications Update ServiceBrowse Red Hat / Red Hat Enterprise Linux 8.2 Telecommunications Update Servicekernel-rtDefault status: affected | CVE List | 0:4.18.0-193.128.1.rt13.179.el8_2 to < * | unaffected |
Red Hat Enterprise Linux 8.2 Update Services for SAP SolutionsBrowse Red Hat / Red Hat Enterprise Linux 8.2 Update Services for SAP SolutionskernelDefault status: affected | CVE List | 0:4.18.0-193.128.1.el8_2 to < * | unaffected |
Red Hat Enterprise Linux 8.2 Update Services for SAP SolutionsBrowse Red Hat / Red Hat Enterprise Linux 8.2 Update Services for SAP Solutionskpatch-patchDefault status: unaffected | CVE List | Version data not supplied | |
Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update SupportBrowse Red Hat / Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update SupportkernelDefault status: affected | CVE List | 0:4.18.0-305.114.1.el8_4 to < * | unaffected |
Proofs of concept
1Repository PoCs
GitHubrockrid3r/CVE-2023-5178Repository PoCby rockrid3rStars: 7Not analyzed12 files
References
Showing 12 of 27RHSA-2023:7379Vendor advisory
https://access.redhat.com/errata/RHSA-2023:7379 RHSA-2023:7418Vendor advisory
https://access.redhat.com/errata/RHSA-2023:7418 RHSA-2023:7548Vendor advisory
https://access.redhat.com/errata/RHSA-2023:7548 RHSA-2023:7549Vendor advisory
https://access.redhat.com/errata/RHSA-2023:7549 RHSA-2023:7551Vendor advisory
https://access.redhat.com/errata/RHSA-2023:7551 RHSA-2023:7554Vendor advisory
https://access.redhat.com/errata/RHSA-2023:7554 RHSA-2023:7557Vendor advisory
https://access.redhat.com/errata/RHSA-2023:7557 RHSA-2023:7559Vendor advisory
https://access.redhat.com/errata/RHSA-2023:7559 RHSA-2024:0340Vendor advisory
https://access.redhat.com/errata/RHSA-2024:0340 RHSA-2024:0378Vendor advisory
https://access.redhat.com/errata/RHSA-2024:0378 RHSA-2024:0386Vendor advisory
https://access.redhat.com/errata/RHSA-2024:0386