Home > Vulnerability Database > CVE-2023-5178

Mend.io Vulnerability Database

CVE-2023-5178

Date: November 1, 2023

A use-after-free vulnerability was found in drivers/nvme/target/tcp.c"in"nvmet_tcp_free_crypto` due to a logical bug in the NVMe/TCP subsystem in the Linux kernel. This issue may allow a malicious user to cause a use-after-free and double-free problem, which may permit remote code execution or lead to local privilege escalation.

Language: C

Severity Score

8.8

Related Resources (28)

Url: https://access.redhat.com/errata/RHSA-2023:7549

Url: https://access.redhat.com/security/cve/CVE-2023-5178

Url: https://security.netapp.com/advisory/ntap-20231208-0004/

Url: https://access.redhat.com/errata/RHSA-2023:7548

Url: https://access.redhat.com/errata/RHSA-2024:0340

Url: https://access.redhat.com/errata/RHSA-2024:0461

Url: https://access.redhat.com/errata/RHSA-2023:7370

Url: https://access.redhat.com/errata/RHSA-2023:7554

Url: https://access.redhat.com/errata/RHSA-2023:7379

Url: https://access.redhat.com/errata/RHSA-2024:0431

Url: https://access.redhat.com/errata/RHSA-2024:1268

Url: https://nvd.nist.gov/vuln/detail/CVE-2023-5178

Url: https://access.redhat.com/errata/RHSA-2024:0432

Url: https://access.redhat.com/errata/RHSA-2024:0575

Url: https://lists.debian.org/debian-lts-announce/2024/01/msg00005.html

Url: https://access.redhat.com/errata/RHSA-2024:0378

Url: https://access.redhat.com/errata/RHSA-2024:0554

Url: https://access.redhat.com/errata/RHSA-2023:7551

Url: https://access.redhat.com/errata/RHSA-2024:0412

Url: https://access.redhat.com/errata/RHSA-2024:1269

Url: https://bugzilla.redhat.com/show_bug.cgi?id=2241924

Url: https://access.redhat.com/errata/RHSA-2023:7418

Url: https://access.redhat.com/errata/RHSA-2023:7559

Url: https://access.redhat.com/errata/RHSA-2023:7557

Url: https://lore.kernel.org/linux-nvme/20231002105428.226515-1-sagi@grimberg.me/

Url: https://access.redhat.com/errata/RHSA-2024:0386

Url: https://access.redhat.com/errata/RHSA-2024:1278

Url: https://www.mend.io/vulnerability-database/CVE-2023-5178

Severity Score

8.8

Weakness Type (CWE)

Use After Free

CWE-416

CVSS v3.1

Base Score:	8.8
Attack Vector (AV):	NETWORK
Attack Complexity (AC):	LOW
Privileges Required (PR):	LOW
User Interaction (UI):	NONE
Scope (S):	UNCHANGED
Confidentiality (C):	HIGH
Integrity (I):	HIGH
Availability (A):	HIGH

Mend.io Vulnerability Database

We found results for “”

CVE-2023-5178

Date: November 1, 2023

Language: C

Severity Score

Related Resources (28)

Severity Score

Weakness Type (CWE)

CVSS v3.1

Do you need more information?