CVE-2023-1077 : In the Linux kernel, pick_next_rt_entity() may return a type confused entry, not

In the Linux kernel, pick_next_rt_entity() may return a type confused entry, not detected by the BUG_ON condition, as the confused entry will not be NULL, but list_head.The buggy error condition would lead to a type confused entry with the list head,which would then be used as a type confused sched_rt_entity,causing memory corruption.

Published 2023-03-27 21:15:10

Updated 2024-01-12 17:43:31

Source Red Hat, Inc.

View at NVD, CVE.org

Vulnerability category: Memory Corruption

Products affected by CVE-2023-1077

Debian » Debian Linux » Version: 10.0
cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*
Matching versions
Linux » Linux Kernel
Versions from including (>=) 5.16 and before (<) 6.1.16
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Matching versions
Linux » Linux Kernel
Versions from including (>=) 4.20 and before (<) 5.4.235
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Matching versions
Linux » Linux Kernel
Versions from including (>=) 6.2 and before (<) 6.2.3
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Matching versions
Linux » Linux Kernel
Versions from including (>=) 2.6.25 and before (<) 4.19.293
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Matching versions
Linux » Linux Kernel
Versions from including (>=) 5.5 and before (<) 5.10.173
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Matching versions
Linux » Linux Kernel
Versions from including (>=) 5.11 and before (<) 5.15.99
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Matching versions
Netapp » A700s Firmware » Version: N/A
cpe:2.3:o:netapp:a700s_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Netapp » A700s » Version: N/A
Netapp » H410c Firmware » Version: N/A
cpe:2.3:o:netapp:h410c_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Netapp » H410c » Version: N/A
Netapp » H300s Firmware » Version: N/A
cpe:2.3:o:netapp:h300s_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Netapp » H300s » Version: N/A
Netapp » H500s Firmware » Version: N/A
cpe:2.3:o:netapp:h500s_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Netapp » H500s » Version: N/A
Netapp » H700s Firmware » Version: N/A
cpe:2.3:o:netapp:h700s_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Netapp » H700s » Version: N/A
Netapp » H410s Firmware » Version: N/A
cpe:2.3:o:netapp:h410s_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Netapp » H410s » Version: N/A
Netapp » 8300 Firmware » Version: N/A
cpe:2.3:o:netapp:8300_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Netapp » 8300 » Version: N/A
Netapp » 8700 Firmware » Version: N/A
cpe:2.3:o:netapp:8700_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Netapp » 8700 » Version: N/A
Netapp » A400 Firmware » Version: N/A
cpe:2.3:o:netapp:a400_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Netapp » A400 » Version: N/A
Netapp » C400 Firmware » Version: N/A
cpe:2.3:o:netapp:c400_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Netapp » C400 » Version: N/A

Exploit prediction scoring system (EPSS) score for CVE-2023-1077

EPSS FAQ

0.02%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 3 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2023-1077

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
7.0	HIGH	CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H	1.0	5.9	NIST
Attack Vector: Local Attack Complexity: High Privileges Required: Low User Interaction: None Scope: Unchanged Confidentiality: High Integrity: High Availability: High

CWE ids for CVE-2023-1077

CWE-843 Access of Resource Using Incompatible Type ('Type Confusion')

The product allocates or initializes a resource such as a pointer, object, or variable using one type, but it later accesses that resource using a type that is incompatible with the original type.
Assigned by:
- nvd@nist.gov (Primary)
- secalert@redhat.com (Secondary)

References for CVE-2023-1077

https://lists.debian.org/debian-lts-announce/2023/05/msg00005.html

[SECURITY] [DLA 3404-1] linux-5.10 security update
Mailing List;Third Party Advisory

CVEs referencing this url
https://git.kernel.org/pub/scm/linux/kernel/git/next/linux-next.git/commit/?id=7c4a5b89a0b5a57a64b601775b296abf77a9fe97

kernel/git/next/linux-next.git - The linux-next integration testing tree
Mailing List;Patch
https://security.netapp.com/advisory/ntap-20230511-0002/

CVE-2023-1077 Linux Kernel Vulnerability in NetApp Products | NetApp Product Security
Third Party Advisory
https://lists.debian.org/debian-lts-announce/2024/01/msg00004.html

[SECURITY] [DLA 3710-1] linux security update
Mailing List

CVEs referencing this url

Jump to

Vulnerability Details : CVE-2023-1077

Products affected by CVE-2023-1077

Exploit prediction scoring system (EPSS) score for CVE-2023-1077

CVSS scores for CVE-2023-1077

CWE ids for CVE-2023-1077

References for CVE-2023-1077