CVE-2023-1077

kernel: Type confusion in pick_next_rt_entity()

Published Mar 27, 2023 CVSS 3.1 · 7.0 High EPSS < 1% KEV · Not listed
Description
In the Linux kernel, pick_next_rt_entity() may return a type confused entry, not detected by the BUG_ON condition, as the confused entry will not be NULL, but list_head.The buggy error condition would lead to a type confused entry with the list head,which would then be used as a type confused sched_rt_entity,causing memory corruption.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
Debian DLA Debian DLA DLA-3404-1 linux-5.10 security update
Debian DLA Debian DLA DLA-3710-1 linux security update
Ubuntu USN Ubuntu USN USN-6033-1 Linux kernel (OEM) vulnerabilities
Ubuntu USN Ubuntu USN USN-6171-1 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-6172-1 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-6185-1 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-6187-1 Linux kernel (IBM) vulnerabilities
Ubuntu USN Ubuntu USN USN-6207-1 Linux kernel (Intel IoTG) vulnerabilities
Ubuntu USN Ubuntu USN USN-6222-1 Linux kernel (Xilinx ZynqMP) vulnerabilities
Ubuntu USN Ubuntu USN USN-6223-1 Linux kernel (Azure CVM) vulnerabilities
Ubuntu USN Ubuntu USN USN-6256-1 Linux kernel (IoT) vulnerabilities
History
Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Type Values Removed Values Added
First Time appeared Redhat
Redhat enterprise Linux
CPEs cpe:/a:redhat:enterprise_linux:9
cpe:/o:redhat:enterprise_linux:9
Vendors & Products Redhat
Redhat enterprise Linux