CVE-2023-0122: Linux Kernel

High severity, CVSS 7.5. EPSS: 1.3% chance of exploitation in the next 30 days.

A NULL pointer dereference vulnerability in the Linux kernel NVMe functionality, in nvmet_setup_auth(), allows an attacker to perform a Pre-Auth Denial of Service (DoS) attack on a remote machine. Affected versions v6.0-rc1 to v6.0-rc3, fixed in v6.0-rc4.

Affected products

• Linux Linux Kernel: version 6.0 only

Published 2023-01-17. Last modified 2026-06-17.