CVE-2023-1078: Linux Kernel

High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days.

A flaw was found in the Linux Kernel in RDS (Reliable Datagram Sockets) protocol. The rds_rm_zerocopy_callback() uses list_entry() on the head of a list causing a type confusion. Local user can trigger this with rds_message_put(). Type confusion leads to `struct rds_msg_zcopy_info *info` actually points to something else that is potentially controlled by local user. It is known how to trigger this, which causes an out of bounds access, and a lock corruption.

Affected products

• Linux Linux Kernel: from 4.17, before 4.19.273 (fixed in 4.19.273); from 4.20, before 5.4.232 (fixed in 5.4.232); from 5.5, before 5.10.168 (fixed in 5.10.168); from 5.11, before 5.15.94 (fixed in 5.15.94); from 5.16, before 6.1.12 (fixed in 6.1.12)

Published 2023-03-27. Last modified 2026-06-17.