UBUNTU-CVE-2023-0458

    Dashboard / Vulnerabilities / UBUNTU-CVE-2023-0458

    UBUNTU-CVE-2023-0458

    Published: 26 Apr 2023Last Modified: 9 Sept 2026
    Upstream:
    CVE-2023-0458
    Aliases:
    USN-6079-1
    USN-6091-1
    USN-6093-1

    Summary:

    Details: A speculative pointer dereference problem exists in the Linux Kernel on the do_prlimit() function. The resource argument value is controlled and is used in pointer arithmetic for the 'rlim' variable and can be used to leak the contents. We recommend upgrading past version 6.1.8 or commit 739790605705ddcf18f21782b9c99ad7d53a8c11

    References: https://ubuntu.com/security/CVE-2023-0458, https://github.com/google/security-research/security/advisories/GHSA-m7j5-797w-vmrh, https://git.kernel.org/linus/739790605705ddcf18f21782b9c99ad7d53a8c11, https://ubuntu.com/security/notices/USN-6079-1, https://ubuntu.com/security/notices/USN-6091-1, https://ubuntu.com/security/notices/USN-6093-1, https://ubuntu.com/security/notices/USN-6096-1, https://ubuntu.com/security/notices/USN-6134-1, https://ubuntu.com/security/notices/USN-6222-1, https://ubuntu.com/security/notices/USN-6254-1, https://ubuntu.com/security/notices/USN-6256-1, https://ubuntu.com/security/notices/USN-6341-1, https://ubuntu.com/security/notices/USN-6385-1, https://www.cve.org/CVERecord?id=CVE-2023-0458

    Affected packages

    Package

    Name: linux

    Purl: pkg:deb/ubuntu/linux?arch=source&distro=trusty%2Fesm

    Affected ranges

    Type: ECOSYSTEM

    Events:

    Introduced- 0
    Fixed -3.13.0-193.244

    Affected versions

    3.11.0-12.19

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    UBUNTU-CVE-2023-0458 | CVE-DB