Copyfromuser on 64-bit versions of the Linux kernel does not implement the _uaccessbeginnospec allowing a user to bypass the "accessok" check and pass a kernel pointer to copyfromuser(). This would allow an attacker to leak information. We recommend upgrading beyond commit 74e19ef0ff8061ef55957c3abd71614ef0f42f47
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2023-0459.json"
[
{
"id": "CVE-2023-0459-17431eef",
"source": "https://github.com/torvalds/linux/commit/4b842e4e25b12951fa10dedb4bc16bc47e3b850c",
"signature_version": "v1",
"deprecated": false,
"signature_type": "Function",
"digest": {
"function_hash": "4912830048629726478426711626137085396",
"length": 1393.0
},
"target": {
"function": "raw_copy_from_user",
"file": "arch/x86/include/asm/uaccess_64.h"
}
},
{
"id": "CVE-2023-0459-33e86abc",
"source": "https://github.com/torvalds/linux/commit/4b842e4e25b12951fa10dedb4bc16bc47e3b850c",
"signature_version": "v1",
"deprecated": false,
"signature_type": "Function",
"digest": {
"function_hash": "273696725340455739238252652505933991286",
"length": 640.0
},
"target": {
"function": "raw_copy_from_user",
"file": "arch/x86/include/asm/uaccess_32.h"
}
},
{
"id": "CVE-2023-0459-54664793",
"source": "https://github.com/torvalds/linux/commit/4b842e4e25b12951fa10dedb4bc16bc47e3b850c",
"signature_version": "v1",
"deprecated": false,
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"75212018302290782377720933935048302194",
"41791907736817582119472909557165893349",
"46223692717408666128328835863429898123",
"32057304616786200517897131820373560873",
"256954682871438202643253367121496765679",
"198994056404027523328806484027355851012",
"123651063611366104808595646378467757412",
"323048587467763388603049661087721811133",
"213999065017703122116864526619142446561",
"210186719425962518031409852666975364294",
"301473424128209463208776047490007247475",
"96632855876940550630738386629636120245",
"188549242535072212472068746800814666609",
"141006165083349949124451890340190474184",
"162542417410484372583470334313065789045",
"110934218441401442032957895092681833605",
"230545825930755142592794066567879023933",
"328740683403147824475993605805650489170",
"108112294274961115842951418035339743766",
"67053594914584206512791779241029139206",
"63099909166149829256892365230424820759",
"287819125602225014384187926750176884701",
"68775125476959963858143624611114743965",
"122925777792418579270232213114169115865",
"65099297913357461915815906952885909368",
"306248946000646575538389072757436115528",
"272133733824273524166926086264854482267",
"6014493904787904397940562249222095376",
"206329063118398393595966887290416860400"
]
},
"target": {
"file": "arch/x86/include/asm/uaccess_32.h"
}
},
{
"id": "CVE-2023-0459-69aa8451",
"source": "https://github.com/torvalds/linux/commit/4b842e4e25b12951fa10dedb4bc16bc47e3b850c",
"signature_version": "v1",
"deprecated": false,
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"294333689693706491880500129918786826651",
"180031415249142167875910120571930246749",
"325044610327391824665243147408859928838",
"297586439266594754697741651662333753975",
"234648886868499435810239145902649986341",
"173532938319242213923601068531022778581",
"283070359779382498672924100691400299204",
"268516874213151043896782654932924233555",
"87320154163383470442942880405156802536",
"31619574663647532952988349571213353098",
"1793928449742960365181440233581641311",
"100244214298739028120791883230685905142",
"108031128832425146249344412060483201812",
"267312614706240855404519040467647300532",
"12553959424974572604495146087382018935",
"35314361866094237706010671385219027628",
"319881316217087903676314151209461261262",
"32412290279118389002636218981849437838",
"91383761386062541593881393142373669865",
"202304919084573919500624609836424017841",
"327419723122512583437779578871359698234",
"173360449796664294821681862150962682938",
"257822756145463053093948247311593919897",
"274461754604017792373579218952007976936",
"285222030504466596435779327237808201820",
"101195524930827908235166669315893298044",
"16056191635861534454864628186872740851",
"246737977190840839629668186142279746826",
"74885925624095121568181803747626313777",
"42142007888585620294975195379008618598",
"12155676761643679257140790272232249571",
"328180224755206642550176867168318180225",
"18829285711630547600388667441660081462",
"229589955514416840055613980067403501272",
"107819040501167466551701170029394399040",
"323708747592457579202549047367352020386",
"255385595784200339089862368448001846649",
"327438751653421774296698173062120877725",
"25053795169761016207073548034010356266",
"81239322678582994036259380618908878165",
"278740281655239814446661891660339531467",
"238708481440422419697798219385674897380",
"204203106718721440707292338037016789187",
"74965482545541650481393650636034300316",
"300401578798982281621974890978316553627",
"36392154522817676754774157274591277378",
"112634257454487788395818307774959612319",
"43719706082639497903383685723625826872",
"119238083149414949459514316975723302587",
"218504114993466841282059174740121852877",
"89603200358935653881699508317857411482",
"279948737567256421807816366833575329849",
"49406337780972593161812998043483569254",
"239940822407004998609809044009753168725",
"71102714527973909517067898737749809858",
"333667791304382211050063263385997049046",
"151676233703262443223572034202874998769",
"322544996742350909997116565697627968730",
"80325627933561460735134823802510837502",
"88259861179288032419650431114729044291",
"285496283785651545909249658021049766108",
"334822771379694226472593563138632949692",
"252092761438398978414722171570444061805",
"180733081457005501715826620160868453867",
"228599531899977386219977784047312433280",
"101985606359509576544417886367806938096",
"122601708916757757534051212964079360954",
"241813805269458308141495698300041943980",
"330811821783452016389435891614269908061",
"172266802733797515563056556905064017218",
"91308378908691452205190166351582227836",
"164334295803300278119026029065999585647",
"130931797629370333566783258549905839304",
"328917879689904551704911007002659205327",
"97795359746097225115677751087270246374",
"208362634558683681674812411497031481752",
"310442335565773296643739333529869460193",
"156283902410361981266090307798643984515",
"37871000856120314727213989395474925217",
"80211824887689206228297924843406702112",
"78727042486009480633567248931606199835",
"92495865178126124191286244292437963721",
"23214650080815381911615242744841622425",
"41144914352869593190896925010866009626",
"9451654210432892208129831313569587234",
"117288941790507138588095929284119378368",
"122984874893574085506100133376677606316",
"193858857908550407161792886868836010575",
"318189406852897692034277040997735155549",
"230215664422781545883625443414724655807",
"283071023372953035312466787016096216747",
"303080167328457660448694773402651207642",
"16177055643345443715027657298090972561",
"176983367144147192498343550081891147064",
"81358141930172826343097966458164578767",
"287011138798927660946003681737344611397",
"310561393935929012739643242845834315955",
"276417480799537086502944642140526600239",
"210892681604436120425693335168598643524",
"307540996336262645414017971892517392938",
"278087118788377022350402365190485471916",
"284959580881411213701711715530598867949",
"316007824696575685458499443633783283220",
"235969750274969539614489547134706131010",
"38016708814654267333494380061547772129",
"152941228130070169040780949361625479460",
"332532498113802160379886698756519838521",
"10986458774453612161770134612453520047",
"312472179139131267948898271757845744184",
"235796337456276676995338785594010964876",
"78429306102109811852288513339931303455"
]
},
"target": {
"file": "arch/x86/include/asm/uaccess_64.h"
}
},
{
"id": "CVE-2023-0459-6a40bdee",
"source": "https://github.com/torvalds/linux/commit/74e19ef0ff8061ef55957c3abd71614ef0f42f47",
"signature_version": "v1",
"deprecated": false,
"signature_type": "Function",
"digest": {
"function_hash": "116045037567212989937570087221526876404",
"length": 6579.0
},
"target": {
"function": "___bpf_prog_run",
"file": "kernel/bpf/core.c"
}
},
{
"id": "CVE-2023-0459-6d795d92",
"source": "https://github.com/torvalds/linux/commit/4b842e4e25b12951fa10dedb4bc16bc47e3b850c",
"signature_version": "v1",
"deprecated": false,
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"70538732409083722130452554378972467825",
"274802636591126027518139454485910385149",
"201249145104843726146886065456732812645",
"171393248830896692792364971481095057115",
"210583428648538132650005226107895114215",
"156581597980903058762733956183585891140",
"96800921522920756770811841738665175010",
"73447391635795674530692698690931521048",
"149029193476493945917881385211913352502",
"45136592672683148761167526738430079211",
"189578670042683059132892884798984339566",
"288900401328395294725044568607542248075",
"22405920286072684953829876844944539786"
]
},
"target": {
"file": "arch/x86/include/asm/uaccess.h"
}
},
{
"id": "CVE-2023-0459-8df065a1",
"source": "https://github.com/torvalds/linux/commit/74e19ef0ff8061ef55957c3abd71614ef0f42f47",
"signature_version": "v1",
"deprecated": false,
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"280920730124476712329098799068708123574",
"160152916379557717719739309273786637805",
"78673398529952192127364425898284858853",
"102103130259885848659887229797584590825",
"75455586718374494169280616228744638842",
"22352102127322483191306529548247114500",
"10810916104314591511819420705109639630",
"304102080418774492729814281823978718127"
]
},
"target": {
"file": "lib/usercopy.c"
}
},
{
"id": "CVE-2023-0459-8f419a2c",
"source": "https://github.com/torvalds/linux/commit/74e19ef0ff8061ef55957c3abd71614ef0f42f47",
"signature_version": "v1",
"deprecated": false,
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"187727787639086221752071876958147264379",
"229268892858638022226214545679765841040",
"198956146126052752879031333345209810732",
"280200894858379656643177036516510655707",
"198303179889507452260053359182484713077",
"211989855700969023826694547360851247497"
]
},
"target": {
"file": "kernel/bpf/core.c"
}
},
{
"id": "CVE-2023-0459-9e38b754",
"source": "https://github.com/torvalds/linux/commit/4b842e4e25b12951fa10dedb4bc16bc47e3b850c",
"signature_version": "v1",
"deprecated": false,
"signature_type": "Function",
"digest": {
"function_hash": "271997917236090600456850250556057887664",
"length": 1391.0
},
"target": {
"function": "raw_copy_to_user",
"file": "arch/x86/include/asm/uaccess_64.h"
}
},
{
"id": "CVE-2023-0459-b0a0ae78",
"source": "https://github.com/torvalds/linux/commit/74e19ef0ff8061ef55957c3abd71614ef0f42f47",
"signature_version": "v1",
"deprecated": false,
"signature_type": "Function",
"digest": {
"function_hash": "290963121913590150739846287939351251228",
"length": 412.0
},
"target": {
"function": "_copy_from_user",
"file": "lib/usercopy.c"
}
},
{
"id": "CVE-2023-0459-ef27083e",
"source": "https://github.com/torvalds/linux/commit/74e19ef0ff8061ef55957c3abd71614ef0f42f47",
"signature_version": "v1",
"deprecated": false,
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"235914016726128787826198841451296465679",
"299923974765673794150710785254066768294",
"264597952814826504908208903821382281132"
]
},
"target": {
"file": "include/linux/nospec.h"
}
}
]