CVE-2023-0458

MEDIUM5.3

Spectre V1 Gadget in do_prlimit in the Linux Kernel

Published Apr 26, 2023

Modified 11 months ago

Details

A speculative pointer dereference problem exists in the Linux Kernel on the do_prlimit() function. The resource argument value is controlled and is used in pointer arithmetic for the 'rlim' variable and can be used to leak the contents. We recommend upgrading past version 6.1.8 or commit 739790605705ddcf18f21782b9c99ad7d53a8c11

References

WEBhttps://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/diff/kernel/sys.c?id=v6.1.8&id2=v6.1.7 WEBhttps://github.com/torvalds/linux/commit/739790605705ddcf18f21782b9c99ad7d53a8c11 WEBhttps://lists.debian.org/debian-lts-announce/2023/05/msg00005.html WEBhttps://lists.debian.org/debian-lts-announce/2023/05/msg00006.html ADVISORYhttps://www.cve.org/CVERecord?id=CVE-2023-0458

CVSS Analysis

CVSS v3.1

5.3

Exploitability

Attack Vector

NetworkAV:N

Attack Complexity

HighAC:H

Privileges Required

LowPR:L

User Interaction

NoneUI:N

Scope

UnchangedS:U

Impact

Confidentiality

HighC:H

Integrity

NoneI:N

Availability

NoneA:N

5.3/CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N

Weakness Type (CWE)

Memory Safety

CWE-476

NULL Pointer Dereference

Ecosystems

Timeline

PublishedApr 26, 2023

ModifiedFeb 13, 2025