VDB

UBUNTU-CVE-2023-1078

UBUNTU-CVE-2023-1078 PUBLISHED CVSS 8.5 HIGH

Record from OSV · Published March 2, 2023

A flaw was found in the Linux Kernel in RDS (Reliable Datagram Sockets) protocol. The rds_rm_zerocopy_callback() uses list_entry() on the head of a list causing a type confusion. Local user can trigger this with rds_message_put(). Type confusion leads to `struct rds_msg_zcopy_info *info` actually points to something else that is potentially controlled by local user. It is known how to trigger this, which causes an out of bounds access, and a lock corruption.

Fixed versions

Upgrade to a fixed version or later. Language registries are listed first, then Linux distributions, then vendor products.

PackageEcosystemFixed in
linux-aws-5.15Ubuntu:20.04:LTS5.15.0-1036.40~20.04.1
linux-oracle-5.15Ubuntu:20.04:LTS5.15.0-1035.41~20.04.1
linux-azure-fdeUbuntu:22.04:LTS5.15.0-1038.45.1
linux-aws-fipsUbuntu:Pro:FIPS-updates:20.04:LTS5.4.0-1102.110+fips1
linux-azure-5.19Ubuntu:22.04:LTS5.19.0-1026.29~22.04.1
linux-gcp-fipsUbuntu:Pro:FIPS-updates:20.04:LTS5.4.0-1105.114+fips1
linux-oracle-5.4Ubuntu:18.04:LTS5.4.0-1101.110~18.04.1
linux-intel-iotgUbuntu:22.04:LTS5.15.0-1030.35
linux-gcpUbuntu:22.04:LTS5.15.0-1034.42
linux-gkeUbuntu:20.04:LTS5.4.0-1099.106
linux-nvidia-tegra-5.15Ubuntu:20.04:LTS5.15.0-1014.14~20.04.1
linux-gkeopUbuntu:22.04:LTS5.15.0-1020.25

42 more packages have a fixed version. See every fix in Lookup.

Risk scores

CVSS 4.0
8.5
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Affected products

VendorProductVersions
Ubuntu:18.04:LTSlinux-gcp-5.35.3.0-1018.19~18.04.1, 5.3.0-1020.22~18.04.1, 5.3.0-1026.28~18.04.1
Ubuntu:18.04:LTSlinux-gkeop-5.45.4.0-1048.51~18.04.1, 5.4.0-1049.52~18.04.1, 5.4.0-1051.54~18.04.1
Ubuntu:20.04:LTSlinux-aws-5.155.15.0-1014.18~20.04.1, 5.15.0-1035.39~20.04.1, 5.15.0-1034.38~20.04.1
Ubuntu:20.04:LTSlinux-oracle-5.155.15.0-1030.36~20.04.1, 0, 5.15.0-1007.9~20.04.1
Ubuntu:22.04:LTSlinux-azure-fde0, 5.15.0-1019.24.1, 5.15.0-1024.30.1
Ubuntu:Pro:FIPS-updates:20.04:LTSlinux-aws-fips5.4.0-1083.90+fips1, 5.4.0-1081.88+fips1, 5.4.0-1080.87+fips1
Ubuntu:22.04:LTSlinux-azure-5.190, 5.19.0-1020.21~22.04.1, 5.19.0-1021.22~22.04.1
Ubuntu:Pro:FIPS-updates:20.04:LTSlinux-gcp-fips5.4.0-1078.84+fips1, 5.4.0-1104.113+fips1, 5.4.0-1103.112+fips1
Ubuntu:18.04:LTSlinux-oracle-5.45.4.0-1100.109~18.04.1, 5.4.0-1043.46~18.04.1, 5.4.0-1044.47~18.04.1
Ubuntu:22.04:LTSlinux-intel-iotg5.15.0-1026.31, 5.15.0-1027.32, 5.15.0-1028.33
Ubuntu:22.04:LTSlinux-gcp5.15.0-1022.29, 5.15.0-1025.32, 5.15.0-1026.33
Ubuntu:20.04:LTSlinux-gke5.4.0-1056.59, 5.4.0-1059.62, 5.4.0-1061.64
Ubuntu:20.04:LTSlinux-nvidia-tegra-5.155.15.0-1012.12~20.04.1, 5.15.0-1009.9~20.04.1, 5.15.0-1010.10~20.04.1
Ubuntu:22.04:LTSlinux-gkeop5.15.0-1008.12, 5.15.0-1007.10, 5.15.0-1016.21
Ubuntu:22.04:LTSlinux-raspi5.15.0-1002.2, 5.15.0-1003.3, 5.15.0-1004.4
Ubuntu:18.04:LTSlinux-aws-5.00, 5.0.0-1025.28, 5.0.0-1024.27~18.04.1
Ubuntu:20.04:LTSlinux-azure-5.115.11.0-1025.27~20.04.1, 5.11.0-1022.23~20.04.1, 5.11.0-1015.16~20.04.1
Ubuntu:22.04:LTSlinux5.15.0-23.23, 0, 5.13.0-19.19
Ubuntu:18.04:LTSlinux-azure5.0.0-1016.17~18.04.1, 5.0.0-1014.14~18.04.1, 4.18.0-1025.27~18.04.1
Ubuntu:20.04:LTSlinux-azure-5.135.13.0-1031.37~20.04.1, 0, 5.13.0-1009.10~20.04.2

…and 86 more

Timeline

  • Mar 2, 2023 CVE Published
  • Oct 22, 2026 CVE Updated
  • Oct 31, 2026 Distribution Patch (15 in total, the first dated here)
  • Oct 31, 2026 Security Advisory (15 in total, the first dated here)

Query this with the API

The same record, from the CLI:

vulnetix vdb vuln UBUNTU-CVE-2023-1078
vulnetix vdb fixes UBUNTU-CVE-2023-1078

Or with curl, using the org id and key from your account page:

curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
  "https://api.vdb.vulnetix.com/v2/vuln/UBUNTU-CVE-2023-1078/fixes/registry"

The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart

References

Look up in the Resolve Platform →
$ Lookup Community · 50/day Open Lookup ›