CVE-2023-1513

Katalog CVE

CVSS 3.3 · Low EPSS 0,23%

Kerentanan Improper Initialization pada linux kernel, fedoraproject fedora +1 lainnya. Skor CVSS 3.1 3.3 (Low) menurut NVD.

Deskripsi (NVD)

A flaw was found in KVM. When calling the KVM_GET_DEBUGREGS ioctl, on 32-bit systems, there might be some uninitialized portions of the kvm_debugregs structure that could be copied to userspace, causing an information leak.

Rincian

Terbit di NVD

23 Maret 2023

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

3.3 (Low), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-665: Improper Initialization

EPSS (30 hari)

0,23% peluang dieksploitasi; lebih tinggi dari 12,6% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://bugzilla.redhat.com/show_bug.cgi?id=2179892 issue tracking · patch · advisory pihak ketiga
• https://github.com/torvalds/linux/commit/2c10b61421a28e95a46ab489fd56c0f442ff6952 patch
• https://lists.debian.org/debian-lts-announce/2023/05/msg00005.html
• https://lists.debian.org/debian-lts-announce/2023/05/msg00006.html
• https://lore.kernel.org/kvm/20230214103304.3689213-1-gregkh%40linuxfoundation.org/