CVE-2023-0458

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to 6.1.8

Description A speculative pointer dereference problem exists in the Linux Kernel on the do prlimit() function. The resource argument value is controlled and is used in pointer arithmetic for the rlim variable and can be used to leak the contents.

Recommendations Upgrade past version 6.1.8 or apply commit 739790605705ddcf18f21782b9c99ad7d53a8c11 to resolve the issue. As a temporary workaround, consider restricting access to the do prlimit() function until a patch is available.