CVE-2023-1075
kernel: net/tls: tls_is_tx_ready() checked list_entry
Severity
LowRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · January 28, 2023
Updated · November 2, 2026
Description
A memory leak flaw was found in the Linux kernel's TLS protocol. This issue could allow a local user unauthorized access to some memory.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
To mitigate this issue, prevent module tls from being loaded. Please see https://access.redhat.com/solutions/41278 for how to blacklist a kernel module to prevent it from loading automatically.
CVSS / CWE
CVSS 3.1 · 3.3CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
CWE-843 · Access of Resource Using Incompatible Type