A NULL pointer dereference vulnerability in the Linux kernel NVMe functionality, in nvmetsetupauth(), allows an attacker to perform a Pre-Auth Denial of Service (DoS) attack on a remote machine. Affected versions v6.0-rc1 to v6.0-rc3, fixed in v6.0-rc4.
{
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/0xxx/CVE-2023-0122.json",
"cwe_ids": [
"CWE-476"
],
"cna_assigner": "redhat"
}{
"extracted_events": [
{
"introduced": "0"
},
{
"last_affected": "Linux kernel 6.0-rc4"
}
],
"source": "AFFECTED_FIELD"
}