PT-2023-1658
CVE-2023-1075
·
Publicado
2023-01-28
·
Atualizado
2025-02-24
Descrição por
CVSS 3.1
3.3
BaixaMétricasAV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Linux Kernel (affected versions not specified)
Description
A flaw was found in the Linux Kernel, where the
tls is tx ready() function incorrectly checks for list emptiness. This can potentially lead to accessing a type-confused entry to the list head, causing the last byte of the confused field to overlap with rec->tx ready, resulting in a leak. The issue is related to the implementation of the TLS protocol in the Linux Kernel and may lead to a denial of service if exploited.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Impactos
Fornecedores
Produtos afetados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾