search

RenukaSelvar / kernel_smp

Other
0 stars 0 forks source link

CVE-2023-0459 (Medium) detected in multiple libraries #494

Open mend-bolt-for-github[bot] opened 2 months ago

mend-bolt-for-github[bot] commented 2 months ago

CVE-2023-0459 - Medium Severity Vulnerability

Vulnerable Libraries - linuxlinux-4.19.313, linuxlinux-4.19.313, linuxlinux-4.19.313

Vulnerability Details

Copy_from_user on 64-bit versions of the Linux kernel does not implement the __uaccess_begin_nospec allowing a user to bypass the "access_ok" check and pass a kernel pointer to copy_from_user(). This would allow an attacker to leak information. We recommend upgrading beyond commit 74e19ef0ff8061ef55957c3abd71614ef0f42f47

Publish Date: 2023-05-25

URL: CVE-2023-0459

CVSS 3 Score Details (5.5)

Base Score Metrics: - Exploitability Metrics: - Attack Vector: Local - Attack Complexity: Low - Privileges Required: Low - User Interaction: None - Scope: Unchanged - Impact Metrics: - Confidentiality Impact: High - Integrity Impact: None - Availability Impact: None

For more information on CVSS3 Scores, click here.

Suggested Fix

Type: Upgrade version

Origin: https://www.linuxkernelcves.com/cves/CVE-2023-0459

Release Date: 2023-01-24

Fix Resolution: v4.14.307,v4.19.274,v5.4.233,v5.10.170,v5.15.96,v6.1.14,v6.2.1

Step up your Open Source Security Game with Mend here