NetSight
IP …
low2.5

CVE-2023-52746

In the Linux kernel, the following vulnerability has been resolved: xfrm/compat: prevent potential spectre v1 gadget in xfrm_xlate32_attr() int type = nla_type…

Impact

In the Linux kernel, the following vulnerability has been resolved: xfrm/compat: prevent potential spectre v1 gadget in xfrm_xlate32_attr() int type = nla_type(nla); if (type > XFRMA_MAX) { return -EOPNOTSUPP; } @type is then used as an array index and can be used as a Spectre v1 gadget. if (nla_len(nla) < compat_policy[type].len) { array_index_nospec() can be used to prevent leaking content of kernel memory to malicious users.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 5.10 before 5.10.168
from 5.11 before 5.15.94
from 5.16 before 6.1.12
Version 6.2

Weakness classification

CWE-401

References