Lucene search

K
prionPRIOn knowledge basePRION:CVE-2023-0459
HistoryMay 25, 2023 - 2:15 p.m.

Design/Logic Flaw

2023-05-2514:15:00
PRIOn knowledge base
www.prio-n.com
3
64-bit linux
access_ok bypass
copy_from_user
information leakage
upgrade recommendation

5.8 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.0%

Copy_from_user on 64-bit versions of the Linux kernel does not implement the __uaccess_begin_nospec allowing a user to bypass the β€œaccess_ok” check and pass a kernel pointer to copy_from_user(). This would allow an attacker to leak information. We recommend upgrading beyond commitΒ 74e19ef0ff8061ef55957c3abd71614ef0f42f47

5.8 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.0%