Oracle Linux: CVE-2023-1075: ELSA-2023-7077: kernel security, bug fix, and enhancement update (IMPORTANT) (Multiple Advisories)

Oracle Linux: CVE-2023-1075: ELSA-2023-7077:kernel security, bug fix, and enhancement update (IMPORTANT) (Multiple Advisories)

Severity

2

CVSS

(AV:L/AC:L/Au:S/C:P/I:N/A:N)

Published

01/28/2023

Created

11/18/2023

Added

11/16/2023

Modified

01/07/2025

Description

A flaw was found in the Linux Kernel. The tls_is_tx_ready() incorrectly checks for list emptiness, potentially accessing a type confused entry to the list_head, leaking the last byte of the confused field that overlaps with rec->tx_ready. A memory leak flaw was found in the Linux kernel's TLS protocol. This issue could allow a local user unauthorized access to some memory.

Solution(s)

• oracle-linux-upgrade-kernel

References

• https://attackerkb.com/topics/cve-2023-1075
• CVE - 2023-1075
• ELSA-2023-7077
• ELSA-2023-6583