Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2023-1077

In the Linux kernel, pick_next_rt_entity() may return a type confused entry, not detected by the BUG_ON condition, as the confused entry will not be NULL, but list_head.The buggy error condition would lead to a type confused entry with the list head,which would then be used as a type confused sched_rt_entity,causing memory corruption.

Published

2023-03-27T21:15:10.467

Last Modified

2024-11-21T07:38:24.903

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 7.0 (HIGH)

Weaknesses
  • Type: Secondary
    CWE-843
  • Type: Primary
    CWE-843
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System linux linux_kernel < 4.19.293 Yes
Operating System linux linux_kernel < 5.4.235 Yes
Operating System linux linux_kernel < 5.10.173 Yes
Operating System linux linux_kernel < 5.15.99 Yes
Operating System linux linux_kernel < 6.1.16 Yes
Operating System linux linux_kernel < 6.2.3 Yes
Operating System debian debian_linux 10.0 Yes
Operating System netapp a700s_firmware - Yes
Hardware netapp a700s - No
Operating System netapp 8300_firmware - Yes
Hardware netapp 8300 - No
Operating System netapp 8700_firmware - Yes
Hardware netapp 8700 - No
Operating System netapp a400_firmware - Yes
Hardware netapp a400 - No
Operating System netapp c400_firmware - Yes
Hardware netapp c400 - No
Operating System netapp h300s_firmware - Yes
Hardware netapp h300s - No
Operating System netapp h500s_firmware - Yes
Hardware netapp h500s - No
Operating System netapp h700s_firmware - Yes
Hardware netapp h700s - No
Operating System netapp h410s_firmware - Yes
Hardware netapp h410s - No
Operating System netapp h410c_firmware - Yes
Hardware netapp h410c - No
References