CVE-2023-6356: 
Linux Kernel vulnerability analysis and mitigation

A flaw was found in the Linux kernel's NVMe driver. This issue may allow an unauthenticated malicious actor to send a set of crafted TCP packages when using NVMe over TCP, leading the NVMe driver to a NULL pointer dereference in the NVMe driver and causing kernel panic and a denial of service (Ubuntu Security, Red Hat CVE).

The vulnerability exists in the NVMe over TCP implementation where an attacker can trigger a NULL pointer dereference specifically in the nvmet_tcp_build_iovec function. The issue has a CVSS score of 7.5 (HIGH) with vector CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H (NetApp Security).

A successful exploitation of this vulnerability can result in a kernel panic leading to a denial of service (DoS) condition on the affected system. The attack can be performed remotely by an unauthenticated actor (Red Hat CVE).

The vulnerability has been fixed in various Linux distributions through security updates. For example, Red Hat has addressed this in RHEL 8 and 9 through multiple security advisories. Ubuntu has also released patches for affected versions. Users are advised to update their systems to the latest available kernel version (Red Hat Errata, Ubuntu Security).