CVE-2023-1075

2023-03-2700:00:00

CWE-200

redhat

www.cve.org

linux

kernel

tls vulnerability

list emptiness

type confusion

cve-2023-1075

5.9 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.0%

JSON

A flaw was found in the Linux Kernel. The tls_is_tx_ready() incorrectly checks for list emptiness, potentially accessing a type confused entry to the list_head, leaking the last byte of the confused field that overlaps with rec->tx_ready.

CNA Affected

[
  {
    "vendor": "n/a",
    "product": "Linus kernel",
    "versions": [
      {
        "version": "unknown",
        "status": "affected"
      }
    ]
  }
]