CVE-2023-0045

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2023-0045
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-0045.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2023-0045
Aliases
  • GHSA-9x5g-vmxf-4qj8
Downstream
CLSA (1)
DEBIAN (1)
OESA (4)
openSUSE (2)
SUSE (15)
UBUNTU (1)
Related
openSUSE (2)
SUSE (15)
Published
2023-04-25T22:44:57Z
Modified
2026-10-21T02:57:03Z
Severity
  • 4.7 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N CVSS Calculator
Summary
Incorrect indirect branch prediction barrier in the Linux Kernel
Details

The current implementation of the prctl syscall does not issue an IBPB immediately during the syscall. The ib_prctl_set  function updates the Thread Information Flags (TIFs) for the task and updates the SPEC_CTRL MSR on the function __speculation_ctrl_update, but the IBPB is only issued on the next schedule, when the TIF bits are checked. This leaves the victim vulnerable to values already injected on the BTB, prior to the prctl syscall.  The patch that added the support for the conditional mitigation via prctl (ib_prctl_set) dates back to the kernel 4.9.176.

We recommend upgrading past commit a664ec9158eeddd75121d39c9a0758016097fa96

Database specific 
{
    "cna_assigner":  "Google",
    "cwe_ids":  [
        "CWE-610"
    ],
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/0xxx/CVE-2023-0045.json"
}
References

Affected packages

Git / git.kernel.org

Affected ranges

Type
GIT
Repo
https://git.kernel.org
Events
Introduced
9137bb27e60e
Fixed
a664ec9158eeddd75121d39c9a0758016097fa96
Database specific
Show details 
{
    "extracted_events":  [
        {
            "range":  [
                {
                    "introduced":  "9137bb27e60e"
                },
                {
                    "fixed":  "a664ec9158eeddd75121d39c9a0758016097fa96"
                }
            ],
            "source":  "AFFECTED_FIELD",
            "strategy":  "StandardRange"
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-0045.json"