AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2023-5178

HIGH · CVSS 8.8 EPSS 9.14% Public Exploit

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2023-11-01 · Last synced 2026-08-04

CyberRota Analysis

This is a high severity vulnerability with a CVSS score of 8.8. It affects Linux. Public exploit code or proof-of-concept references have been detected in its references. It may be remotely exploitable.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

Detected Signals
remote code execution code execution

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2023-5178
Severity
HIGH
CVSS
8.8
EPSS
9.14%
Linux

Original NVD Description

A use-after-free vulnerability was found in drivers/nvme/target/tcp.c` in `nvmet_tcp_free_crypto` due to a logical bug in the NVMe/TCP subsystem in the Linux kernel. This issue may allow a malicious user to cause a use-after-free and double-free problem, which may permit remote code execution or lead to local privilege escalation.

Related CVEs

Other vulnerabilities affecting the same vendor(s)