Summary
Linux Kernel contains an improper input validation vulnerability in the Reliable Datagram Sockets (RDS) protocol implementation that allows local users to gain privileges via crafted use of the sendmsg and recvmsg system calls.
- Vendor
- Linux
- Product
- Kernel
- Added to KEV
- May 12, 2023
- Remediation due
- Jun 2, 2023 (US federal deadline)
- Ransomware use
- Not known
- Weakness
- CWE-20
- EPSS
- 15.9% as of Nov 12
In the news
- No Asia-Pacific article names this CVE yet.
Linked
Actors named alongside it:
none
Incidents exploiting it:
- none recorded
References