NetSight
IP …
high7.0

CVE-2023-1077

In the Linux kernel, pick_next_rt_entity() may return a type confused entry, not detected by the BUG_ON condition, as the confused entry will not be NULL, but …

Impact

In the Linux kernel, pick_next_rt_entity() may return a type confused entry, not detected by the BUG_ON condition, as the confused entry will not be NULL, but list_head.The buggy error condition would lead to a type confused entry with the list head,which would then be used as a type confused sched_rt_entity,causing memory corruption.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 2.6.25 before 4.19.293
from 4.20 before 5.4.235
from 5.5 before 5.10.173
from 5.11 before 5.15.99
from 5.16 before 6.1.16
from 6.2 before 6.2.3
DebianDebian Linux
Version 10.0
NetappA700s Firmware
All versions
Netapp8300 Firmware
All versions
Netapp8700 Firmware
All versions
NetappA400 Firmware
All versions
NetappC400 Firmware
All versions
NetappH300s Firmware
All versions
NetappH500s Firmware
All versions
NetappH700s Firmware
All versions
NetappH410s Firmware
All versions
NetappH410c Firmware
All versions

Weakness classification

CWE-843

References