VULNERABILITY INTELLIGENCE

CVE-2023-0458

CVSS score5.3 MEDIUM
EPSS probability0.73%
CISA KEVNot currently listed
Published2023-04-26
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N

Description

A speculative pointer dereference problem exists in the Linux Kernel on the do_prlimit() function. The resource argument value is controlled and is used in pointer arithmetic for the 'rlim' variable and can be used to leak the contents. We recommend upgrading past version 6.1.8 or commit 739790605705ddcf18f21782b9c99ad7d53a8c11

Weakness classification

  • CWE-476: NULL Pointer Dereference

Primary references