CVE-2023-2860: Linux Kernel IPv6 Segment Routing Out-Of-Bounds Read Information Disclosure Vulnerability
An out-of-bounds read vulnerability was found in the SR-IPv6 implementation in the Linux kernel. Quoting ZDI security advisory [1]:
"This vulnerability allows local attackers to disclose sensitive information on affected installations of the Linux Kernel. An attacker must first obtain the ability to execute high-privileged code on the target system in order to exploit this vulnerability.
The specific flaw exists within the processing of seg6 attributes. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this in conjunction with other vulnerabilities to escalate privileges and execute arbitrary code in the context of the kernel."
[1] https://www.zerodayinitiative.com/advisories/ZDI-CAN-18511/
Other sources
An out-of-bounds read vulnerability was found in the SR-IPv6 implementation in the Linux kernel. The flaw exists within the processing of seg6 attributes. The issue results from the improper validation of user-supplied data, which can result in a read past the end of an allocated buffer. This flaw allows a privileged local user to disclose sensitive information on affected installations of the Linux kernel.
This vulnerability allows local attackers to disclose sensitive information on affected installations of the Linux Kernel. An attacker must first obtain the ability to execute high-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the processing of seg6 attributes. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this in conjunction with other vulnerabilties to escalate privileges and execute arbitrary code in the context of the kernel.
— ZDI
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2023-2860?
CVE-2023-2860 is considered a medium severity vulnerability due to its potential to disclose sensitive information.
How do I fix CVE-2023-2860?
To fix CVE-2023-2860, update the Linux kernel to a secure version such as 5.10.223-1, 6.1.123-1, or a later patched version.
What versions of the Linux kernel are affected by CVE-2023-2860?
CVE-2023-2860 affects Linux kernel versions up to 5.19.19 and all pre-releases of 6.0, including rc1 to rc4.
Who is vulnerable to CVE-2023-2860?
Local attackers on affected installations of the Linux kernel are vulnerable to CVE-2023-2860.
What type of vulnerability is CVE-2023-2860?
CVE-2023-2860 is classified as an out-of-bounds read vulnerability in the SR-IPv6 implementation.