CVE-2023-5178

CVE-2023-5178 is a high-severity use-after-free vulnerability in the Linux kernel's NVMe/TCP subsystem, specifically within the drivers/nvme/target/tcp.c file. This flaw affects Linux, NetApp, and Red Hat products. The vulnerability carries a CVSS score of 8.8 (High) due to its network attack vector, low attack complexity, and potential for remote code execution or local privilege escalation, leading to high impacts on confidentiality, integrity, and availability. Currently, there is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or inclusion in the CISA KEV catalog, though it has garnered some community discussion and media coverage.