CVE-2023-6121: Red Hat Enterprise Linux

Medium severity, CVSS 4.3. EPSS: 1.6% chance of exploitation in the next 30 days.

An out-of-bounds read vulnerability was found in the NVMe-oF/TCP subsystem in the Linux kernel. This issue may allow a remote attacker to send a crafted TCP packet, triggering a heap-based buffer overflow that results in kmalloc data being printed and potentially leaked to the kernel ring buffer (dmesg).

Affected products

• Red Hat Enterprise Linux: version 6.0 only; version 7.0 only; version 8.0 only; version 9.0 only

Published 2023-11-16. Last modified 2026-06-17.