Lucene search

CVE-2023-0045

🗓️ 25 Apr 2023 23:09:15Reported by [email protected]Type

The prctl syscall in kernel 4.9.176 does not immediately issue IBPB, leaving the system vulnerable to injected values prior to the syscall

Reporter	Title	Published	Views	Family All 170
Debian CVE	CVE-2023-0045	25 Apr 202323:15	–	debiancve
RedhatCVE	CVE-2023-0045	6 Feb 202306:56	–	redhatcve
Veracode	Information Disclosure	6 Mar 202317:25	–	veracode
Cvelist	CVE-2023-0045 Incorrect indirect branch prediction barrier in the Linux Kernel	25 Apr 202322:44	–	cvelist
GithubExploit	Exploit for Externally Controlled Reference to a Resource in Another Sphere in Linux Linux Kernel	4 Feb 202322:42	–	githubexploit
GithubExploit	Exploit for CVE-2023-0045	4 Feb 202309:23	–	githubexploit
GithubExploit	Exploit for Externally Controlled Reference to a Resource in Another Sphere in Linux Linux Kernel	7 Feb 202319:12	–	githubexploit
OSV	CVE-2023-0045	25 Apr 202323:15	–	osv
OSV	kernel-devel-6.1.12-1.1 on GA media	15 Jun 202400:00	–	osv
OSV	linux-aws vulnerabilities	23 Feb 202316:09	–	osv

Nvd

Node

linux linux_kernelRange3.16.68–3.17

linux linux_kernelRange4.4.180–4.5

linux linux_kernelRange4.9.176–4.10

linux linux_kernelRange4.14.86–4.14.303

linux linux_kernelRange4.19.7–4.19.270

linux linux_kernelRange4.20–5.4.229

linux linux_kernelRange5.5.0–5.10.163

linux linux_kernelRange5.11–5.15.87

linux linux_kernelRange5.16–6.0.19

linux linux_kernelRange6.1–6.1.5

Node

debian debian_linuxMatch10.0

Node

netapp active_iq_unified_managerMatch-vmware_vsphere

Node

netapp h300s_firmwareMatch-

AND

netapp h300sMatch-

Node

netapp h500s_firmwareMatch-

AND

netapp h500sMatch-

Node

netapp h700s_firmwareMatch-

AND

netapp h700sMatch-

Node

netapp h410s_firmwareMatch-

AND

netapp h410sMatch-

Node

netapp h410c_firmwareMatch-

AND

netapp h410cMatch-

Source	Link
security	www.security.netapp.com/advisory/ntap-20230714-0001/
github	www.github.com/google/security-research/security/advisories/GHSA-9x5g-vmxf-4qj8
lists	www.lists.debian.org/debian-lts-announce/2023/05/msg00005.html
lists	www.lists.debian.org/debian-lts-announce/2023/05/msg00006.html
git	www.git.kernel.org/tip/a664ec9158eeddd75121d39c9a0758016097fa96

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

25 Apr 2023 23:15Current

6Medium risk

Vulners AI Score6

CVSS37.5

EPSS0.002

CWE-610