CVE-2023-0459: Copy_from_user Spectre-V1 Gadget in Linux Kernel
Copyfromuser on 64-bit versions of the Linux kernel does not implement the uaccessbeginnospec allowing a user to bypass the "accessok" check and pass a kernel pointer to copyfromuser(). This would allow an attacker to leak information. We recommend upgrading beyond commit 74e19ef0ff8061ef55957c3abd71614ef0f42f47
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.223-1Fixed in 5.10.234-1Fixed in 6.1.129-1Fixed in 6.1.135-1Fixed in 6.12.25-1Fixed in 6.12.27-1 - Upgrade
Upgrade
Linux kernelto a version that resolves this vulnerability.Patch 74e19ef0ff8061ef55957c3abd71614ef0f42f47
Event History
Frequently Asked Questions
What is the severity of CVE-2023-0459?
CVE-2023-0459 has been assigned a high severity due to its potential for sensitive information leakage.
How do I fix CVE-2023-0459?
To fix CVE-2023-0459, upgrade your Linux kernel to a version beyond commit 74 or to one of the recommended fixed versions.
Which versions are affected by CVE-2023-0459?
CVE-2023-0459 affects 64-bit versions of the Linux kernel prior to 4.14.307, between 4.19.0 and 4.19.274, between 5.4.0 and 5.4.233, between 5.10.0 and 5.10.170, between 5.15.0 and 5.15.96, and between 6.1.0 and 6.1.14.
What type of attack does CVE-2023-0459 enable?
CVE-2023-0459 enables an attacker to bypass the access checks, potentially leaking sensitive information from the kernel.
Is CVE-2023-0459 specific to any particular Linux distribution?
CVE-2023-0459 is not limited to a specific Linux distribution as it affects the Linux kernel itself.