CVE Database›CVE-2023-0459

CVE-2023-0459

kernel: Copy_from_user on 64-bit versions may leak kernel information

Loading…

Severity

Low

Red Hat Product Security

6.7

CVSS 3.1

Review impact separately from score.

Published · February 15, 2020

Updated · November 2, 2026

Description

A vulnerability was found in copy_from_user in 64-bit versions of the Linux kernel. This flaw allows a local attacker to bypass the "access_ok" sanity check and pass a kernel pointer to copy_from_user(), resulting in kernel data leaking.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

CVSS / CWE

CVSS 3.1 · 6.7
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

CWE-402 · Transmission of Private Resources into a New Sphere