CVE-2023-0458CWE-476

Spectre V1 Gadget in do_prlimit in the Linux Kernel

Medium · published April 26, 2023

CVSS v3.1
5.3
EPSS
1%
Percentile
53.4
In the wild
Unconfirmed
What it is

A speculative pointer dereference problem exists in the Linux Kernel on the do_prlimit() function. The resource argument value is controlled and is used in pointer arithmetic for the 'rlim' variable and can be used to leak the contents. We recommend upgrading past version 6.1.8 or commit 739790605705ddcf18f21782b9c99ad7d53a8c11

The record
Technical detail
CVSS v3.1
5.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00720 · 53.4th percentile
Weakness
CWE-476 · NULL Pointer Dereference
Published
2023-04-26T18:03Z
EPSS history
Timeline
  • 26 APR 18:03Z
    Spectre V1 Gadget in do_prlimit in the Linux Kernel
    cvelistv5