CVE-2023-1077
In the Linux kernel, pick_next_rt_entity() may return a type confused entry, not detected by the BUG_ON condition, as the confused entry will not be NULL, but list_hea…
Published Mar 27, 2023 · updated Oct 14, 2026 · linux linux kernel
In the Linux kernel, pick_next_rt_entity() may return a type confused entry, not detected by the BUG_ON condition, as the confused entry will not be NULL, but list_head.The buggy error condition would lead to a type confused entry with the list head,which would then be used as a type confused sched_rt_entity,causing memory corruption.
Code
The project this record applies to. Exploit listings stay in References.
Timeline
Detection, updates, and resolution for this record.
Mar 27, 2023 · NIST NVD
Detected
In the Linux kernel, pick_next_rt_entity() may return a type confused entry, not detected by the BUG_ON condition, as the confused entry will not be NULL, but list_head.The buggy error condition would lead to a type confused entry with the list head,which would then be used as a type confused sched_rt_entity,causing memory corruption.
Oct 14, 2026 · NIST NVD
Updated
In the Linux kernel, pick_next_rt_entity() may return a type confused entry, not detected by the BUG_ON condition, as the confused entry will not be NULL, but list_head.The buggy error condition would lead to a type confused entry with the list head,which would then be used as a type confused sched_rt_entity,causing memory corruption.
Affected
- cpe debian/debian linux10.0
- cpe linux/linux kernelversion unspecified
- cpe netapp/8300 firmwareversion unspecified
- cpe netapp/8700 firmwareversion unspecified
- cpe netapp/a400 firmwareversion unspecified
- cpe netapp/a700s firmwareversion unspecified
- cpe netapp/c400 firmwareversion unspecified
Sources
- CVE.orgVulnerability recordCVE-2023-1077
Official CVE identifier
cve.org - FIRST EPSSExploitation probabilityCVE-2023-1077
30-day exploitation probability 0.3%
first.org - NIST NVDVulnerability recordCVE-2023-1077
In the Linux kernel, pick_next_rt_entity() may return a type confused entry, not detected by the BUG_ON condition, as the confused entry will not be NULL, but list_head.The buggy error condition would lead to a type confused entry with the list head,which would then be used as a
nvd.nist.gov