CVE-2023-1075: Infoleak
A flaw in the Linux Kernel found. The tlsistxready() incorrectly checks for list emptiness, potentially accessing a type confused entry to the listhead, leaking the last byte of the confused field that overlaps with rec->txready.
Reference: https://git.kernel.org/pub/scm/linux/kernel/git/next/linux-next.git/commit/?id=ffe2a22562444720b05bdfeb999c03e810d84cbb
Other sources
A flaw was found in the Linux Kernel. The tlsistxready() incorrectly checks for list emptiness, potentially accessing a type confused entry to the listhead, leaking the last byte of the confused field that overlaps with rec->txready.
— Launchpad
Linux Kernel could allow a local authenticated attacker to obtain sensitive information, caused by improper checking for list emptiness by the tlsistxready() function. By sending a specially crafted request to access a type confused entry to the listhead, an attacker could exploit this vulnerability to obtain the last byte of the confused field that overlaps with rec->txready, and use this information to launch further attacks against the affected system.
— IBM
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2023-1075?
CVE-2023-1075 is classified as a high-severity vulnerability affecting the Linux Kernel.
How do I fix CVE-2023-1075?
To fix CVE-2023-1075, update the Linux Kernel package to version 6.1.11 or later for Red Hat, or to 5.10.223-1 or later for Debian.
Which Linux Kernel versions are affected by CVE-2023-1075?
CVE-2023-1075 affects all Linux Kernel versions before 6.1.11 for Red Hat, and versions prior to 5.10.223-1 for Debian.
What components are affected by CVE-2023-1075?
CVE-2023-1075 affects the Linux Kernel as well as IBM Security Verify Governance, Identity Manager software and virtual appliance components.
Is there a potential impact of exploitation of CVE-2023-1075?
Exploitation of CVE-2023-1075 could lead to information leakage due to incorrect list handling in the Linux Kernel.