NetSight
IP …
high7.8

CVE-2023-1078

A flaw was found in the Linux Kernel in RDS (Reliable Datagram Sockets) protocol.

Impact

A flaw was found in the Linux Kernel in RDS (Reliable Datagram Sockets) protocol. The rds_rm_zerocopy_callback() uses list_entry() on the head of a list causing a type confusion. Local user can trigger this with rds_message_put(). Type confusion leads to `struct rds_msg_zcopy_info *info` actually points to something else that is potentially controlled by local user. It is known how to trigger this, which causes an out of bounds access, and a lock corruption.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 4.17 before 4.19.273
from 4.20 before 5.4.232
from 5.5 before 5.10.168
from 5.11 before 5.15.94
from 5.16 before 6.1.12

Weakness classification

CWE-787CWE-843

References