CVE-2023-53116: linux kernel from 4.8 (inclusive), before 4.14.311 (exclusive), from 4.15 (inclusive), before 4.19.279 (exclusive)…

Affected technology

linux kernel · from 4.8 (inclusive), before 4.14.311 (exclusive)
linux

linux kernel · from 4.15 (inclusive), before 4.19.279 (exclusive)
linux

linux kernel · from 4.20 (inclusive), before 5.4.238 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.176 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.104 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.21 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.2.8 (exclusive)
linux

linux kernel · 6.3 · update rc1
linux

linux kernel · 6.3 · update rc2
linux

Linux · a07b4970f464f13640e28e16dad6cfa33647cc99 to before e5d99b29012bbf0e86929403209723b2806500c1, a07b4970f464f13640e28e16dad6cfa33647cc99 to before fafcb4b26393870c45462f9af6a48e581dbbcf7e, a07b4970f464f13640e28e16dad6cfa33647cc99 to before 04c394208831d5e0d5cfee46722eb0f033cd4083, a07b4970f464f13640e28e16dad6cfa33647cc99 to before a6317235da8aa7cb97529ebc8121cc2a4c4c437a, a07b4970f464f13640e28e16dad6cfa33647cc99 to before f1d5888a5efe345b63c430b256e95acb0a475642, a07b4970f464f13640e28e16dad6cfa33647cc99 to before bcd535f07c58342302a2cd2bdd8894fe0872c8a9, a07b4970f464f13640e28e16dad6cfa33647cc99 to before 8ed9813871038b25a934b21ab76b5b7dbf44fc3a, a07b4970f464f13640e28e16dad6cfa33647cc99 to before 6173a77b7e9d3e202bdb9897b23f2a8afe7bf286
Linux

Linux · 4.8
Linux

Component: Not specified by the source
Function: call
File: drivers/nvme/target/core.c

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

A attacker could trigger a use-after-free error. Source advisory’s CVSS 3.1 assessment (base score 9.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not state a further attacker outcome.