CVE-2023-6535

Name	CVE-2023-6535
Description	A flaw was found in the Linux kernel's NVMe driver. This issue may allow an unauthenticated malicious actor to send a set of crafted TCP packages when using NVMe over TCP, leading the NVMe driver to a NULL pointer dereference in the NVMe driver, causing kernel panic and a denial of service.
Source	CVE (at NVD; CERT, LWN, oss-sec, fulldisc, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more)
References	DLA-3841-1

Vulnerable and fixed packages

The table below lists information on source packages.

Source Package	Release	Version	Status
linux (PTS)	jessie, jessie (lts)	3.16.84-1	vulnerable
	stretch (security)	4.9.320-2	vulnerable
	stretch (lts), stretch	4.9.320-3	vulnerable
	buster (security), buster, buster (lts)	4.19.316-1	vulnerable
	bullseye	5.10.223-1	fixed
	bullseye (security)	5.10.226-1	fixed
	bookworm	6.1.115-1	fixed
	bookworm (security)	6.1.112-1	fixed
	trixie	6.11.7-1	fixed
	sid	6.11.9-1	fixed
linux-5.10 (PTS)	buster, buster (lts)	5.10.226-1~deb10u1	fixed
	buster (security)	5.10.218-1~deb10u1	fixed

The information below is based on the following data on fixed versions.

Package	Type	Release	Fixed Version	Urgency	Origin
linux	source	jessie	(unfixed)	end-of-life
linux	source	stretch	(unfixed)	end-of-life
linux	source	buster	(unfixed)	end-of-life
linux	source	bullseye	5.10.209-1
linux	source	bookworm	6.1.76-1
linux	source	(unstable)	6.6.15-1
linux-5.10	source	buster	5.10.209-2~deb10u1		DLA-3841-1

Notes

https://bugzilla.redhat.com/show_bug.cgi?id=2254053
https://git.kernel.org/linus/efa56305908ba20de2104f1b8508c6a7401833be (6.8-rc1)
https://git.kernel.org/linus/0849a5441358cef02586fb2d60f707c0db195628 (6.8-rc1)
https://git.kernel.org/linus/9a1abc24850eb759e36a2f8869161c3b7254c904 (6.8-rc1)