CVE-2023-0458

Katalog CVE

CVSS 4.7 · Medium EPSS 0,72%

Kerentanan NULL Pointer Dereference pada linux kernel, debian linux. Skor CVSS 3.1 4.7 (Medium) menurut NVD.

Deskripsi (NVD)

A speculative pointer dereference problem exists in the Linux Kernel on the do_prlimit() function. The resource argument value is controlled and is used in pointer arithmetic for the 'rlim' variable and can be used to leak the contents. We recommend upgrading past version 6.1.8 or commit 739790605705ddcf18f21782b9c99ad7d53a8c11

Rincian

Terbit di NVD

26 April 2023

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

4.7 (Medium), sumber NVD
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-476: NULL Pointer Dereference

EPSS (30 hari)

0,72% peluang dieksploitasi; lebih tinggi dari 52,6% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/diff/kernel/sys.c?id=v6.1.8&id2=v6.1.7 patch
• https://github.com/torvalds/linux/commit/739790605705ddcf18f21782b9c99ad7d53a8c11 patch
• https://lists.debian.org/debian-lts-announce/2023/05/msg00005.html mailing list · advisory pihak ketiga
• https://lists.debian.org/debian-lts-announce/2023/05/msg00006.html mailing list · advisory pihak ketiga