CVE-2023-1513

kernel: KVM: information leak in KVM_GET_DEBUGREGS ioctl on 32-bit systems

Loading…

Severity

Low

Red Hat Product Security

3.3

CVSS 3.1

Review impact separately from score.

Published · February 14, 2023

Updated · June 28, 2026

Description

A flaw was found in KVM. When calling the KVM_GET_DEBUGREGS ioctl, on 32-bit systems, there might be some uninitialized portions of the kvm_debugregs structure that could be copied to userspace, causing an information leak.

Statement

Red Hat Enterprise Linux 6 is not affected by this issue as KVM did not include the KVM_GET_DEBUGREGS ioctl.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CVSS 3.1 · 3.3
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

CWE-665 · Improper Initialization