CVE-2023-6238

A buffer overflow lives in the Linux kernel's NVMe driver: a privileged user can specify a small metadata buffer and then have the device DMA a larger transfer into it, overwriting adjacent kernel memory. The described outcome is random kernel crashes and memory corruption — a memory-safety failure in a core storage driver — with the important qualifier that triggering it requires privilege on the host.

That privilege requirement is the whole story on urgency. The advisory frames the actor as an already-privileged user, so this isn't a remote or unprivileged-local escalation — it's memory corruption reachable by someone who can already issue privileged NVMe operations. The realistic impact is instability and corruption, and while kernel memory-corruption primitives can sometimes be shaped toward escalation, here the entry point already assumes elevated rights, which sharply limits who gains anything.

We rank this below the remotely reachable bugs and treat it as a fleet-patching hygiene item folded into normal kernel update cadence. The relevant inventory question is which hosts run affected kernels on NVMe storage, but given the privileged precondition we don't fast-track it ahead of externally reachable flaws — it rides the regular patch train unless a specific host has an untrusted-but-privileged tenancy model that changes the calculus.