CVE-2023-0045

CVE-2023-0045 describes a vulnerability in the Linux kernel's prctl syscall implementation, specifically affecting how speculative execution mitigations are applied. The flaw, present since kernel version 4.9.176, allows for a brief window where previously injected Branch Target Buffer (BTB) values can be exploited before the mitigation is fully active, impacting systems running Debian, Linux, and NetApp products. Rated with a CVSS score of 7.5 (HIGH), this vulnerability is network-exploitable with low attack complexity and no user interaction required, potentially leading to high confidentiality impacts. The EPSS score is low, indicating a low probability of exploitation in the wild. Currently, there is no evidence of active exploitation, nor are there publicly available exploit modules in Metasploit, Nuclei, or ExploitDB. The vulnerability has received minimal community discussion and media coverage, suggesting a low level of public awareness or concern.