{"uuid": "9ddabba8-a87f-4c68-b4c4-85da587de151", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-5178", "type": "seen", "source": "https://t.me/sysadm_in_up/1955", "content": "CVE-2023-5178: Linux NVMe-oF/TCP Driver - UAF in `nvmet_tcp_free_crypto`\n\nDue to a logical bug in the NVMe-oF/TCP subsystem in the Linux kernel, a malicious actor, with the ability to send messages to the NVMe-oF/TCP server (either LAN or WAN), can cause a UAF and a double free, which may lead to remote kernel code execution:\n\n- https://www.openwall.com/lists/oss-security/2023/10/15/1", "creation_timestamp": "2026-07-29T12:03:18.741376Z"}