Lucene search

[email protected]CVE-2023-1077

HistoryMar 27, 2023 - 9:15 p.m.

CVE-2023-1077

2023-03-2721:15:10

CWE-843

[email protected]

web.nvd.nist.gov

linux

kernel

pick_next_rt_entity

memory corruption

cve-2023-1077

nvd

7 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

6.9 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

JSON

In the Linux kernel, pick_next_rt_entity() may return a type confused entry, not detected by the BUG_ON condition, as the confused entry will not be NULL, but list_head.The buggy error condition would lead to a type confused entry with the list head,which would then be used as a type confused sched_rt_entity,causing memory corruption.

Affected configurations

NVD

Node

linuxlinux_kernelRange2.6.25–4.19.293

linuxlinux_kernelRange4.20–5.4.235

linuxlinux_kernelRange5.5–5.10.173

linuxlinux_kernelRange5.11–5.15.99

linuxlinux_kernelRange5.16–6.1.16

linuxlinux_kernelRange6.2–6.2.3

Node

debiandebian_linuxMatch10.0

Node

netappa700sMatch-

AND

netappa700s_firmwareMatch-

Node

netapp8300Match-

AND

netapp8300_firmwareMatch-

Node

netapp8700Match-

AND

netapp8700_firmwareMatch-

Node

netappa400Match-

AND

netappa400_firmwareMatch-

Node

netappc400Match-

AND

netappc400_firmwareMatch-

Node

netapph300sMatch-

AND

netapph300s_firmwareMatch-

Node

netapph500sMatch-

AND

netapph500s_firmwareMatch-

Node

netapph700s_firmwareMatch-

AND

netapph700sMatch-

Node

netapph410s_firmwareMatch-

AND

netapph410sMatch-

Node

netapph410c_firmwareMatch-

AND

netapph410cMatch-

CPENameOperatorVersion
linux:linux_kernellinux linux kernellt4.19.293
linux:linux_kernellinux linux kernellt5.4.235
linux:linux_kernellinux linux kernellt5.10.173
linux:linux_kernellinux linux kernellt5.15.99
linux:linux_kernellinux linux kernellt6.1.16
linux:linux_kernellinux linux kernellt6.2.3

CPE	Name	Operator	Version
linux:linux_kernel	linux linux kernel	lt	4.19.293
linux:linux_kernel	linux linux kernel	lt	5.4.235
linux:linux_kernel	linux linux kernel	lt	5.10.173
linux:linux_kernel	linux linux kernel	lt	5.15.99
linux:linux_kernel	linux linux kernel	lt	6.1.16
linux:linux_kernel	linux linux kernel	lt	6.2.3

CNA Affected

[
  {
    "vendor": "n/a",
    "product": "Linux kernel",
    "versions": [
      {
        "version": "unknown",
        "status": "affected"
      }
    ]
  }
]