What is CVE-2023-5178?

CVE-2023-5178 is a high-severity use-after-free vulnerability in the NVMe/TCP subsystem of the Linux kernel. It may allow malicious users to execute remote code or escalate local privileges. Systems running affected versions of the Linux kernel, as well as specific Red Hat Enterprise Linux and NetApp products, are vulnerable. The vulnerability impacts various systems, including x86_64, IBM z Systems, Power, little endian, ARM 64, and real-time systems.

Who is impacted by CVE-2023-5178?

CVE-2023-5178 affects users of the Linux kernel with the NVMe/TCP subsystem, and specific Red Hat Enterprise Linux and NetApp products. Impacted Linux kernel versions include 5.0 to 5.4.260, 5.5 to 5.10.199, 5.11 to 5.15.137, 5.16 to 6.1.60, and 6.2 to 6.5.9. Additionally, Red Hat Enterprise Linux 9.2 Extended Update Support and kernel-rt package users are affected. This vulnerability may allow malicious users to execute remote code or escalate local privileges on affected systems.

What to do if CVE-2023-5178 affected you

If you're affected by the CVE-2023-5178 vulnerability, it's crucial to take immediate action to protect your system. Here's a simplified list of steps to follow:

1. Apply the relevant kernel update for your system, as mentioned in the Red Hat security advisory or the kernel-rt security advisory.

2. Follow the instructions provided in the Red Hat update guide to apply the update.

3. Reboot your system for the update to take effect.

Is this in CISA’s Known Exploited Vulnerabilities Catalog?

The CVE-2023-5178 vulnerability is not listed in CISA's Known Exploited Vulnerabilities Catalog. This high-severity issue is a use-after-free vulnerability in the NVMe/TCP subsystem of the Linux kernel, which may allow malicious users to execute remote code or escalate local privileges. To protect your system, it's crucial to apply the relevant kernel update and reboot your system for the update to take effect.

Weakness Enumeration

The weakness enumeration for this vulnerability is categorized as CWE-416, a use-after-free issue in the NVMe/TCP subsystem of the Linux kernel.

Learn More

For a comprehensive understanding of this vulnerability, including its description, severity, technical details, and known affected software configurations, visit the NVD page or refer to the sources listed below.

• Red Hat security advisory

• kernel-rt security advisory

• kpatch-patch security advisory

• kernel-rt package security advisory