CVE-2023-1513

LowCVSS 3.3/10Last modified Jun 17, 2026

Description

A flaw was found in KVM. When calling the KVM_GET_DEBUGREGS ioctl, on 32-bit systems, there might be some uninitialized portions of the kvm_debugregs structure that could be copied to userspace, causing an information leak.

Metrics

CVSS 3.1 3.3/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Weakness enumeration

CWE-665

Affected software

Vendor	Product	Versions
n/a	Linux kernel (KVM)	Fixed in kernel 6.2

References

Timeline

Published: Mar 23, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-15147.5A vulnerability exists in the component RTU500 Scripting interface. When a client connects to a server using TLS, the server presents a cert CVE-2023-15155.4Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.5.19.CVE-2023-15167.8RoboDK versions 5.5.3 and prior contain an insecure permission assignment to critical directories vulnerability, which could allow a local CVE-2023-15174.8Cross-site Scripting (XSS) - DOM in GitHub repository pimcore/pimcore prior to 10.5.19.CVE-2023-15187.5CP Plus KVMS Pro versions 2.01.0.T.190521 and prior are vulnerable to sensitive credentials being leaked because they are insufficiently p CVE-2023-15217.8On Linux the sccache client can execute arbitrary code with the privileges of a local sccache server, by preloading the code in a shared lib CVE-2023-15228.8SQL Injection in the Hardware Inventory report of Security Center 5.11.2.CVE-2023-152310.0Using the TIOCLINUX ioctl request, a malicious snap could inject contents into the input of the controlling terminal which could allow it to CVE-2023-15246.5The Download Manager WordPress plugin before 3.2.71 does not adequately validate passwords for password-protected files. Upon validation, a CVE-2023-15254.8The Site Reviews WordPress plugin before 6.7.1 does not sanitise and escape some of its settings, which could allow high privilege users suc CVE-2023-15264.6Certain DesignJet and PageWide XL TAA compliant models may have risk of potential information disclosure if the hard disk drive is physicall CVE-2023-15275.4Cross-site Scripting (XSS) - Generic in GitHub repository tsolucio/corebos prior to 8.0.