PT-2023-1658
CVE-2023-1075
·
تاريخ النشر
2023-01-28
·
تاريخ التحديث
2025-02-24
الوصف من
CVSS 3.1
3.3
منخفضةالمقاييسAV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Linux Kernel (affected versions not specified)
Description
A flaw was found in the Linux Kernel, where the
tls is tx ready() function incorrectly checks for list emptiness. This can potentially lead to accessing a type-confused entry to the list head, causing the last byte of the confused field to overlap with rec->tx ready, resulting in a leak. The issue is related to the implementation of the TLS protocol in the Linux Kernel and may lead to a denial of service if exploited.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾