CVE-2023-1074: Medium severity Linux Linux kernel vulnerability
A flaw in the Linux Kernel found. Fail if no bound addresses can be used for a given scope. A type confusion can happen in inetdiagmsgsctpasocfill() in net/sctp/diag.c, which uses a type confused pointer to return information to userspace when issuing a listentry() on asoc->base.bindaddr.addresslist.next when the list is empty.
References: https://git.kernel.org/pub/scm/linux/kernel/git/next/linux-next.git/commit/?id=458e279f861d3f61796894cd158b780765a1569f https://www.openwall.com/lists/oss-security/2023/01/23/1
Other sources
A memory leak flaw was found in the Linux kernel's Stream Control Transmission Protocol. This issue may occur when a user starts a malicious networking service and someone connects to this service. This could allow a local user to starve resources, causing a denial of service.
— Launchpad
Linux Kernel is vulnerable to a denial of service, caused by a memory leak flaw in the Stream Control Transmission Protocol. By sending a specially crafted request, a local authenticated attacker could exploit this vulnerability to starve resources, and results in a denial of service condition.
— IBM
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2023-1074?
CVE-2023-1074 has been classified as a critical vulnerability due to the potential for type confusion and its implications on system security.
Which software versions are affected by CVE-2023-1074?
CVE-2023-1074 affects various versions of the Linux Kernel, specifically those prior to 5.10.223-1, 5.10.226-1, 6.1.123-1, and 6.2, as well as specific IBM Security Verify Governance versions.
How do I fix CVE-2023-1074?
To fix CVE-2023-1074, upgrade your affected Linux Kernel to version 5.10.223-1, 5.10.226-1, 6.1.123-1, or 6.2.
What systems are impacted by CVE-2023-1074?
CVE-2023-1074 impacts systems utilizing the Linux Kernel and specific versions of IBM Security Verify Governance, Identity Manager components.
What is the nature of the vulnerability described in CVE-2023-1074?
CVE-2023-1074 is a type confusion vulnerability that occurs in the inet_diag_msg_sctpasoc_fill() function, potentially allowing unauthorized information to be returned to userspace.