5.3
Medium
CVE-2023-0458 A speculative pointer dereference problem exists in the Linux Kernel on the do_prlimit() function
Description
A speculative pointer dereference problem exists in the Linux Kernel on the do_prlimit() function. The resource argument value is controlled and is used in pointer arithmetic for the 'rlim' variable and can be used to leak the contents. We recommend upgrading past version 6.1.8 or commit 739790605705ddcf18f21782b9c99ad7d53a8c11
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Kernel 6.1 | earliest → 6.1.8 | No fix stated |
References
- git.kernel.org git.kernel.org
- github.com github.com
- lists.debian.org lists.debian.org
- lists.debian.org lists.debian.org
Timeline
- Published
- Last modified
Other CVEs of Linux Kernel
The 43 CVEs of Linux Kernel →
CVE-2024-24864
A race condition was found in the Linux kernel's media/dvb-core in dvbdmx_write() function
5.3
Medium
CVE-2024-24857
A race condition was found in the Linux kernel's net/bluetooth device driver in conn_info_{min,max}_age_set() function
4.6
Medium
CVE-2024-24858
A race condition was found in the Linux kernel's net/bluetooth in {conn,adv}_{min,max}_interval_set() function
4.6
Medium
CVE-2024-24859
A race condition was found in the Linux kernel's net/bluetooth in sniff_{min,max}_interval_set() function
4.6
Medium