CVE-2023-6121

CVE-2023-6121 is an out-of-bounds read vulnerability in the NVMe-oF/TCP subsystem of the Linux kernel, specifically affecting Red Hat Enterprise Linux. A remote attacker can exploit this by sending a crafted TCP packet, leading to a heap-based buffer overflow. This could result in the leakage of kernel memory data to the kernel ring buffer (dmesg). The vulnerability has a CVSS score of 4.3 (Medium), indicating a low impact on confidentiality and no impact on integrity or availability, with low attack complexity and no user interaction required. There is currently no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.