跳转到帖子

Huawei EulerOS: CVE-2023-1075: kernel security update

recommended_posts

发布于
  • Members

Huawei EulerOS: CVE-2023-1075: kernel security update

Severity
2
CVSS
(AV:L/AC:L/Au:S/C:P/I:N/A:N)
Published
03/27/2023
Created
08/10/2023
Added
08/09/2023
Modified
01/28/2025

Description

A flaw was found in the Linux Kernel. The tls_is_tx_ready() incorrectly checks for list emptiness, potentially accessing a type confused entry to the list_head, leaking the last byte of the confused field that overlaps with rec->tx_ready.

Solution(s)

  • huawei-euleros-2_0_sp9-upgrade-kernel
  • huawei-euleros-2_0_sp9-upgrade-kernel-tools
  • huawei-euleros-2_0_sp9-upgrade-kernel-tools-libs
  • huawei-euleros-2_0_sp9-upgrade-python3-perf

References

  • https://attackerkb.com/topics/cve-2023-1075
  • CVE - 2023-1075
  • EulerOS-SA-2023-2584
  • 查看数 697
  • 已创建
  • 最后回复