Tracker / CVE-2023-1077
CVE-2023-1077
High 7.0
In the Linux kernel, pick_next_rt_entity() may return a type confused entry, not detected by the BUG_ON condition, as the confused entry will not be NULL, but list_head.The buggy error condition would lead to a type confused entry with the list head,which would then be used as a type confused sched_rt_entity,causing memory corruption.
Affected products and versions
| debian | debian_linux |
|---|---|
| linux | linux_kernel · 2.6.25 → 4.19.293 |
| linux | linux_kernel · 4.20 → 5.4.235 |
| linux | linux_kernel · 5.11 → 5.15.99 |
| linux | linux_kernel · 5.16 → 6.1.16 |
| linux | linux_kernel · 5.5 → 5.10.173 |
| linux | linux_kernel · 6.2 → 6.2.3 |
| netapp | 8300_firmware |
| netapp | 8700_firmware |
| netapp | a400_firmware |
| netapp | a700s_firmware |
| netapp | c400_firmware |
| netapp | h300s_firmware |
| netapp | h410c_firmware |
| netapp | h410s_firmware |
| netapp | h500s_firmware |
| netapp | h700s_firmware |
Analysis
This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.