CVE-2023-52454 | Linux Kernel up to 6.7.1 nvmet-tcp nvmet_tcp_build_pdu_iovec null pointer dereference

A vulnerability, which was classified as critical, was found in Linux Kernel up to 6.7.1. Affected is the function nvmet_tcp_build_pdu_iovec of the component nvmet-tcp. The manipulation leads to null pointer dereference.

This vulnerability is traded as CVE-2023-52454. The attack can only be done within the local network. There is no exploit available.

It is recommended to upgrade the affected component.