Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
9.9
CVE-2023-5178: Linux kernel NVMe/TCP driver can let attackers run code
CVE-2023-5178 · published 3 years ago
Summary
The NVMe/TCP component in certain Linux kernel versions (including Ubuntu HWE Edge and AWS/Azure kernels) has a coding mistake that can free memory twice. An attacker who can reach the affected system could exploit this to run their own code or gain higher privileges. Apply the latest kernel updates from your Linux distribution to fix the problem.
What to do
- Update canonical linux-aws-5.4 to version 5.4.0-1116.126~18.04.1.
- Update canonical linux-azure-5.4 to version 5.4.0-1121.128~18.04.1.
- Update canonical linux-gcp-5.4 to version 5.4.0-1120.129~18.04.1.
- Update canonical linux-hwe-5.4 to version 5.4.0-169.187~18.04.1.
- Update canonical linux-ibm-5.4 to version 5.4.0-1063.68~18.04.1.
- Update canonical linux-oracle-5.4 to version 5.4.0-1115.124~18.04.1.
- Update canonical linux-raspi-5.4 to version 5.4.0-1100.112~18.04.1.
- Update canonical linux to version 5.4.0-169.187.
- Update canonical linux-aws to version 5.4.0-1116.126.
- Update canonical linux-aws-5.15 to version 5.15.0-1051.56~20.04.1.
- Update canonical linux-azure to version 5.4.0-1121.128.
- Update canonical linux-azure-5.15 to version 5.15.0-1053.61~20.04.1.
- Update canonical linux-bluefield to version 5.4.0-1076.82.
- Update canonical linux-gcp to version 5.4.0-1120.129.
- Update canonical linux-gcp-5.15 to version 5.15.0-1048.56~20.04.1.
- Update canonical linux-gkeop to version 5.4.0-1083.87.
- Update canonical linux-gkeop-5.15 to version 5.15.0-1034.40~20.04.1.
- Update canonical linux-hwe-5.15 to version 5.15.0-91.101~20.04.1.
- Update canonical linux-ibm to version 5.4.0-1063.68.
- Update canonical linux-ibm-5.15 to version 5.15.0-1044.47~20.04.1.
- Update canonical linux-intel-iotg-5.15 to version 5.15.0-1046.52~20.04.1.
- Update canonical linux-iot to version 5.4.0-1028.29.
- Update canonical linux-kvm to version 5.4.0-1104.111.
- Update canonical linux-lowlatency-hwe-5.15 to version 5.15.0-91.101~20.04.1.
- Update canonical linux-nvidia-tegra-5.15 to version 5.15.0-1020.20~20.04.1.
- Update canonical linux-oracle to version 5.4.0-1115.124.
- Update canonical linux-oracle-5.15 to version 5.15.0-1049.55~20.04.1.
- Update canonical linux-raspi to version 5.4.0-1100.112.
- Update canonical linux-riscv-5.15 to version 5.15.0-1047.51~20.04.1.
- Update canonical linux-xilinx-zynqmp to version 5.4.0-1035.39.
- Update canonical linux-aws-fips to version 5.4.0-1116.126+fips1.
- Update canonical linux-azure-fips to version 5.4.0-1121.128+fips1.
- Update canonical linux-fips to version 5.4.0-1090.100.
- Update canonical linux-gcp-fips to version 5.4.0-1120.129+fips1.
- Update canonical linux to version 5.15.0-91.101.
- Update canonical linux-aws to version 5.15.0-1051.56.
- Update canonical linux-aws-6.2 to version 6.2.0-1017.17~22.04.1.
- Update canonical linux-azure to version 5.15.0-1053.61.
- Update canonical linux-azure-6.2 to version 6.2.0-1018.18~22.04.1.
- Update canonical linux-azure-fde to version 5.15.0-1053.61.1.
- Update canonical linux-azure-fde-6.2 to version 6.2.0-1018.18~22.04.1.1.
- Update canonical linux-gcp to version 5.15.0-1048.56.
- Update canonical linux-gcp-6.2 to version 6.2.0-1021.23~22.04.1.
- Update canonical linux-gke to version 5.15.0-1048.53.
- Update canonical linux-gkeop to version 5.15.0-1034.40.
- Update canonical linux-hwe-6.2 to version 6.2.0-39.40~22.04.1.
- Update canonical linux-ibm to version 5.15.0-1044.47.
- Update canonical linux-intel-iotg to version 5.15.0-1046.52.
- Update canonical linux-kvm to version 5.15.0-1048.53.
- Update canonical linux-lowlatency to version 5.15.0-91.101.
- Update canonical linux-lowlatency-hwe-6.2 to version 6.2.0-1018.18~22.04.1.
- Update canonical linux-nvidia to version 5.15.0-1042.42.
- Update canonical linux-nvidia-6.2 to version 6.2.0-1013.13.
- Update canonical linux-nvidia-6.5 to version 6.5.0-1007.7.
- Update canonical linux-nvidia-tegra to version 5.15.0-1020.20.
- Update canonical linux-nvidia-tegra-igx to version 5.15.0-1007.7.
- Update canonical linux-oem-6.1 to version 6.1.0-1026.26.
- Update canonical linux-oem-6.5 to version 6.5.0-1009.10.
- Update canonical linux-oracle to version 5.15.0-1049.55.
- Update canonical linux-raspi to version 5.15.0-1044.47.
- Update canonical linux-xilinx-zynqmp to version 5.15.0-1027.31.
- Update canonical linux-bluefield to version 5.15.0-1033.35.
- Update canonical linux-intel-iot-realtime to version 5.15.0-1044.46.
- Update canonical linux-realtime to version 5.15.0-1052.58.
- Update debian linux to version 6.1.64-1.
- Update debian linux to version 6.5.8-1.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Ubuntu:16.04:LTS | canonical | linux-hwe-edge | All versions |
| Ubuntu:18.04:LTS | canonical | linux-aws-5.0 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-aws-5.3 | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-aws-5.4 |
< 5.4.0-1116.126~18.04.1 Fix: upgrade to 5.4.0-1116.126~18.04.1
|
| Ubuntu:18.04:LTS | canonical | linux-azure | All versions |
| Ubuntu:18.04:LTS | canonical | linux-azure-5.3 | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-azure-5.4 |
< 5.4.0-1121.128~18.04.1 Fix: upgrade to 5.4.0-1121.128~18.04.1
|
| Ubuntu:18.04:LTS | canonical | linux-azure-edge | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gcp | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gcp-5.3 | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-gcp-5.4 |
< 5.4.0-1120.129~18.04.1 Fix: upgrade to 5.4.0-1120.129~18.04.1
|
| Ubuntu:18.04:LTS | canonical | linux-gke-4.15 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gke-5.4 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gkeop-5.4 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-hwe | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-hwe-5.4 |
< 5.4.0-169.187~18.04.1 Fix: upgrade to 5.4.0-169.187~18.04.1
|
| Ubuntu:18.04:LTS | canonical | linux-hwe-edge | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-ibm-5.4 |
< 5.4.0-1063.68~18.04.1 Fix: upgrade to 5.4.0-1063.68~18.04.1
|
| Ubuntu:18.04:LTS | canonical | linux-oem | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oracle-5.0 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oracle-5.3 | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-oracle-5.4 |
< 5.4.0-1115.124~18.04.1 Fix: upgrade to 5.4.0-1115.124~18.04.1
|
| Ubuntu:Pro:18.04:LTS | canonical | linux-raspi-5.4 |
< 5.4.0-1100.112~18.04.1 Fix: upgrade to 5.4.0-1100.112~18.04.1
|
| Ubuntu:20.04:LTS | canonical | linux |
< 5.4.0-169.187 Fix: upgrade to 5.4.0-169.187
|
| Ubuntu:20.04:LTS | canonical | linux-aws |
< 5.4.0-1116.126 Fix: upgrade to 5.4.0-1116.126
|
| Ubuntu:20.04:LTS | canonical | linux-aws-5.15 |
< 5.15.0-1051.56~20.04.1 Fix: upgrade to 5.15.0-1051.56~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-azure |
< 5.4.0-1121.128 Fix: upgrade to 5.4.0-1121.128
|
| Ubuntu:20.04:LTS | canonical | linux-azure-5.15 |
< 5.15.0-1053.61~20.04.1 Fix: upgrade to 5.15.0-1053.61~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-bluefield |
< 5.4.0-1076.82 Fix: upgrade to 5.4.0-1076.82
|
| Ubuntu:20.04:LTS | canonical | linux-gcp |
< 5.4.0-1120.129 Fix: upgrade to 5.4.0-1120.129
|
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.15 |
< 5.15.0-1048.56~20.04.1 Fix: upgrade to 5.15.0-1048.56~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-gkeop |
< 5.4.0-1083.87 Fix: upgrade to 5.4.0-1083.87
|
| Ubuntu:20.04:LTS | canonical | linux-gkeop-5.15 |
< 5.15.0-1034.40~20.04.1 Fix: upgrade to 5.15.0-1034.40~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.15 |
< 5.15.0-91.101~20.04.1 Fix: upgrade to 5.15.0-91.101~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-ibm |
< 5.4.0-1063.68 Fix: upgrade to 5.4.0-1063.68
|
| Ubuntu:20.04:LTS | canonical | linux-ibm-5.15 |
< 5.15.0-1044.47~20.04.1 Fix: upgrade to 5.15.0-1044.47~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-intel-iotg-5.15 |
< 5.15.0-1046.52~20.04.1 Fix: upgrade to 5.15.0-1046.52~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-iot |
< 5.4.0-1028.29 Fix: upgrade to 5.4.0-1028.29
|
| Ubuntu:20.04:LTS | canonical | linux-kvm |
< 5.4.0-1104.111 Fix: upgrade to 5.4.0-1104.111
|
| Ubuntu:20.04:LTS | canonical | linux-lowlatency-hwe-5.15 |
< 5.15.0-91.101~20.04.1 Fix: upgrade to 5.15.0-91.101~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-nvidia-tegra-5.15 |
< 5.15.0-1020.20~20.04.1 Fix: upgrade to 5.15.0-1020.20~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-oracle |
< 5.4.0-1115.124 Fix: upgrade to 5.4.0-1115.124
|
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.15 |
< 5.15.0-1049.55~20.04.1 Fix: upgrade to 5.15.0-1049.55~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-raspi |
< 5.4.0-1100.112 Fix: upgrade to 5.4.0-1100.112
|
| Ubuntu:20.04:LTS | canonical | linux-riscv-5.15 |
< 5.15.0-1047.51~20.04.1 Fix: upgrade to 5.15.0-1047.51~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-xilinx-zynqmp |
< 5.4.0-1035.39 Fix: upgrade to 5.4.0-1035.39
|
| Ubuntu:20.04:LTS | canonical | linux-aws-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-aws-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-aws-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.11 | All versions |
Showing 50 of 153. Show the rest
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Ubuntu:20.04:LTS | canonical | linux-azure-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-fde | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gke | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gke-5.15 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-intel-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.10 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.14 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.6 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-raspi2 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv-5.8 | All versions |
| Ubuntu:Pro:FIPS-updates:20.04:LTS | canonical | linux-aws-fips |
< 5.4.0-1116.126+fips1 Fix: upgrade to 5.4.0-1116.126+fips1
|
| Ubuntu:Pro:FIPS-updates:20.04:LTS | canonical | linux-azure-fips |
< 5.4.0-1121.128+fips1 Fix: upgrade to 5.4.0-1121.128+fips1
|
| Ubuntu:Pro:FIPS-updates:20.04:LTS | canonical | linux-fips |
< 5.4.0-1090.100 Fix: upgrade to 5.4.0-1090.100
|
| Ubuntu:Pro:FIPS-updates:20.04:LTS | canonical | linux-gcp-fips |
< 5.4.0-1120.129+fips1 Fix: upgrade to 5.4.0-1120.129+fips1
|
| Ubuntu:Pro:FIPS:20.04:LTS | canonical | linux-aws-fips | All versions |
| Ubuntu:Pro:FIPS:20.04:LTS | canonical | linux-azure-fips | All versions |
| Ubuntu:Pro:FIPS:20.04:LTS | canonical | linux-fips | All versions |
| Ubuntu:Pro:FIPS:20.04:LTS | canonical | linux-gcp-fips | All versions |
| Ubuntu:22.04:LTS | canonical | linux |
< 5.15.0-91.101 Fix: upgrade to 5.15.0-91.101
|
| Ubuntu:22.04:LTS | canonical | linux-allwinner-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws |
< 5.15.0-1051.56 Fix: upgrade to 5.15.0-1051.56
|
| Ubuntu:22.04:LTS | canonical | linux-aws-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws-6.2 |
< 6.2.0-1017.17~22.04.1 Fix: upgrade to 6.2.0-1017.17~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-aws-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure |
< 5.15.0-1053.61 Fix: upgrade to 5.15.0-1053.61
|
| Ubuntu:22.04:LTS | canonical | linux-azure-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-6.2 |
< 6.2.0-1018.18~22.04.1 Fix: upgrade to 6.2.0-1018.18~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-azure-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-fde |
< 5.15.0-1053.61.1 Fix: upgrade to 5.15.0-1053.61.1
|
| Ubuntu:22.04:LTS | canonical | linux-azure-fde-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-fde-6.2 |
< 6.2.0-1018.18~22.04.1.1 Fix: upgrade to 6.2.0-1018.18~22.04.1.1
|
| Ubuntu:22.04:LTS | canonical | linux-azure-fde-6.8 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp |
< 5.15.0-1048.56 Fix: upgrade to 5.15.0-1048.56
|
| Ubuntu:22.04:LTS | canonical | linux-gcp-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp-6.2 |
< 6.2.0-1021.23~22.04.1 Fix: upgrade to 6.2.0-1021.23~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-gke |
< 5.15.0-1048.53 Fix: upgrade to 5.15.0-1048.53
|
| Ubuntu:22.04:LTS | canonical | linux-gkeop |
< 5.15.0-1034.40 Fix: upgrade to 5.15.0-1034.40
|
| Ubuntu:22.04:LTS | canonical | linux-hwe-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-hwe-6.2 |
< 6.2.0-39.40~22.04.1 Fix: upgrade to 6.2.0-39.40~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-ibm |
< 5.15.0-1044.47 Fix: upgrade to 5.15.0-1044.47
|
| Ubuntu:22.04:LTS | canonical | linux-intel-iotg |
< 5.15.0-1046.52 Fix: upgrade to 5.15.0-1046.52
|
| Ubuntu:22.04:LTS | canonical | linux-kvm |
< 5.15.0-1048.53 Fix: upgrade to 5.15.0-1048.53
|
| Ubuntu:22.04:LTS | canonical | linux-lowlatency |
< 5.15.0-91.101 Fix: upgrade to 5.15.0-91.101
|
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-6.2 |
< 6.2.0-1018.18~22.04.1 Fix: upgrade to 6.2.0-1018.18~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-nvidia |
< 5.15.0-1042.42 Fix: upgrade to 5.15.0-1042.42
|
| Ubuntu:22.04:LTS | canonical | linux-nvidia-6.2 |
< 6.2.0-1013.13 Fix: upgrade to 6.2.0-1013.13
|
| Ubuntu:22.04:LTS | canonical | linux-nvidia-6.5 |
< 6.5.0-1007.7 Fix: upgrade to 6.5.0-1007.7
|
| Ubuntu:22.04:LTS | canonical | linux-nvidia-tegra |
< 5.15.0-1020.20 Fix: upgrade to 5.15.0-1020.20
|
| Ubuntu:22.04:LTS | canonical | linux-nvidia-tegra-igx |
< 5.15.0-1007.7 Fix: upgrade to 5.15.0-1007.7
|
| Ubuntu:22.04:LTS | canonical | linux-oem-5.17 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.0 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.1 |
< 6.1.0-1026.26 Fix: upgrade to 6.1.0-1026.26
|
| Ubuntu:22.04:LTS | canonical | linux-oem-6.5 |
< 6.5.0-1009.10 Fix: upgrade to 6.5.0-1009.10
|
| Ubuntu:22.04:LTS | canonical | linux-oracle |
< 5.15.0-1049.55 Fix: upgrade to 5.15.0-1049.55
|
| Ubuntu:22.04:LTS | canonical | linux-raspi |
< 5.15.0-1044.47 Fix: upgrade to 5.15.0-1044.47
|
| Ubuntu:22.04:LTS | canonical | linux-realtime | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-starfive-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-starfive-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-xilinx-zynqmp |
< 5.15.0-1027.31 Fix: upgrade to 5.15.0-1027.31
|
| Ubuntu:Nvidia-BlueField:22.04:LTS | canonical | linux-bluefield |
< 5.15.0-1033.35 Fix: upgrade to 5.15.0-1033.35
|
| Ubuntu:Pro:FIPS-preview:22.04:LTS | canonical | linux-fips | All versions |
| Ubuntu:Pro:Realtime:22.04:LTS | canonical | linux-intel-iot-realtime |
< 5.15.0-1044.46 Fix: upgrade to 5.15.0-1044.46
|
| Ubuntu:Pro:Realtime:22.04:LTS | canonical | linux-realtime |
< 5.15.0-1052.58 Fix: upgrade to 5.15.0-1052.58
|
| Ubuntu:24.04:LTS | canonical | linux-azure-fde | All versions |
| Ubuntu:24.04:LTS | canonical | linux-raspi-realtime | All versions |
| Debian:12 | debian | linux |
< 6.1.64-1 Fix: upgrade to 6.1.64-1
|
| Debian:13 | debian | linux |
< 6.5.8-1 Fix: upgrade to 6.5.8-1
|
| – | linux | linux_kernel |
>= 5.0, < 5.4.260 >= 5.5, < 5.10.199 >= 5.11, < 5.15.137 >= 5.16, < 6.1.60 >= 6.2, < 6.5.9 cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| – | redhat | enterprise_linux |
8.0 9.0 cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:* |
| – | netapp | active_iq_unified_manager |
All versions
cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vmware_vsphere:*:* |
| – | netapp | solidfire_\&_hci_management_node |
All versions
cpe:2.3:a:netapp:solidfire_\&_hci_management_node:-:*:*:*:*:*:*:* |
| – | netapp | solidfire_\&_hci_storage_node |
All versions
cpe:2.3:a:netapp:solidfire_\&_hci_storage_node:-:*:*:*:*:*:*:* |
| – | red hat | red hat enterprise linux 8 | All versions |
| – | red hat | red hat enterprise linux 8.2 advanced update support | All versions |
| – | red hat | red hat enterprise linux 8.2 telecommunications update service | All versions |
| – | red hat | red hat enterprise linux 8.2 update services for sap solutions | All versions |
| – | red hat | red hat enterprise linux 8.4 advanced mission critical update support | All versions |
| – | red hat | red hat enterprise linux 8.4 telecommunications update service | All versions |
| – | red hat | red hat enterprise linux 8.4 update services for sap solutions | All versions |
| – | red hat | red hat enterprise linux 8.6 extended update support | All versions |
| – | red hat | red hat enterprise linux 8.8 extended update support | All versions |
| – | red hat | red hat enterprise linux 9 | All versions |
| – | red hat | red hat enterprise linux 9.0 extended update support | All versions |
| – | red hat | red hat enterprise linux 9.2 extended update support | All versions |
| – | red hat | red hat virtualization 4 for red hat enterprise linux 8 | All versions |
| – | red hat | red hat enterprise linux 6 | All versions |
| – | red hat | red hat enterprise linux 7 | All versions |
Original advisory text
Kernel: use after free in nvmet_tcp_free_crypto in nvme
A use-after-free vulnerability was found in drivers/nvme/target/tcp.c` in `nvmet_tcp_free_crypto` due to a logical bug in the NVMe/TCP subsystem in the Linux kernel. This issue may allow a malicious user to cause a use-after-free and double-free problem, which may permit remote code execution or lead to local privilege escalation.
References
- https://ubuntu.com/security/CVE-2023-5178 Third Party Advisory
- https://git.kernel.org/linus/d920abd1e7c4884f9ecd0749d1921b7ab19ddfbd Third Party Advisory
- https://www.openwall.com/lists/oss-security/2023/10/15/1 Third Party Advisory
- https://lore.kernel.org/linux-nvme/[email protected]/ Third Party Advisory
- https://ubuntu.com/security/notices/USN-6497-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-6573-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-6548-4 Vendor Advisory
- https://ubuntu.com/security/notices/USN-6548-5 Vendor Advisory
- https://security-tracker.debian.org/tracker/CVE-2023-5178 Vendor Advisory
- https://ubuntu.com/security/notices/USN-6537-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-6548-1 Vendor Advisory
- https://access.redhat.com/errata/RHSA-2023:7379 vendor-advisory x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2024:1268 vendor-advisory x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2024:1269 vendor-advisory x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2024:1278 vendor-advisory x_refsource_REDHAT
- https://lists.debian.org/debian-lts-announce/2024/01/msg00005.html
- https://cert-portal.siemens.com/productcert/html/ssa-613116.html
- https://cert-portal.siemens.com/productcert/html/ssa-794697.html
- https://access.redhat.com/security/cve/CVE-2023-5178 vdb-entry x_refsource_REDHAT
- https://bugzilla.redhat.com/show_bug.cgi?id=2241924 issue-tracking x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2023:7418 vendor-advisory x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2023:7548 vendor-advisory x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2023:7549 vendor-advisory x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2023:7551 vendor-advisory x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2023:7554 vendor-advisory x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2023:7557 vendor-advisory x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2023:7559 vendor-advisory x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2024:0340 vendor-advisory x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2024:0378 vendor-advisory x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2024:0386 vendor-advisory x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2024:0412 vendor-advisory x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2024:0431 vendor-advisory x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2024:0432 vendor-advisory x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2024:0461 vendor-advisory x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2024:0554 vendor-advisory x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2024:0575 vendor-advisory x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2023:7370 vendor-advisory x_refsource_REDHAT
- https://security.netapp.com/advisory/ntap-20231208-0004/
- https://ubuntu.com/security/notices/USN-6536-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-6534-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-6549-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-6534-2 Vendor Advisory
- https://ubuntu.com/security/notices/USN-6549-2 Vendor Advisory
- https://ubuntu.com/security/notices/USN-6548-2 Vendor Advisory
- https://ubuntu.com/security/notices/USN-6534-3 Vendor Advisory
- https://ubuntu.com/security/notices/USN-6548-3 Vendor Advisory
- https://ubuntu.com/security/notices/USN-6549-3 Vendor Advisory
- https://ubuntu.com/security/notices/USN-6549-4 Vendor Advisory
- https://ubuntu.com/security/notices/USN-6549-5 Vendor Advisory
- https://ubuntu.com/security/notices/USN-6635-1 Vendor Advisory
- https://www.cve.org/CVERecord?id=CVE-2023-5178 Third Party Advisory
Internet-facing
14 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit (estimated)
- Gives an attacker full control (estimated)
Severity
9.9
Critical
Type
CWE-416Use After Free
Timeline
Published1 Nov 2023
Updated26 Oct 2026
First seen9 Sep 2026
Sources
UBUNTU-CVE-2023-5178 · OSV
CVE-2023-5178 · NVD
DEBIAN-CVE-2023-5178 · OSV
CVE-2023-5178 · MITRE
Track software like this
Free during beta