{"id":"CVE-2023-1513","details":"A flaw was found in KVM. When calling the KVM_GET_DEBUGREGS ioctl, on 32-bit systems, there might be some uninitialized portions of the kvm_debugregs structure that could be copied to userspace, causing an information leak.","modified":"2026-10-29T11:12:06.182186802Z","published":"2023-03-23T00:00:00Z","related":["ALSA-2024:2950","ALSA-2024:3138","SUSE-SU-2023:1800-1","SUSE-SU-2023:1801-1","SUSE-SU-2023:1802-1","SUSE-SU-2023:1803-1","SUSE-SU-2023:1811-1","SUSE-SU-2023:1848-1","SUSE-SU-2023:1892-1","SUSE-SU-2023:1894-1","SUSE-SU-2023:1897-1","SUSE-SU-2023:1992-1","SUSE-SU-2023:2232-1","SUSE-SU-2023:2506-1","SUSE-SU-2023:2646-1","SUSE-SU-2023:2805-1","SUSE-SU-2023:2809-1","SUSE-SU-2023:2871-1"],"database_specific":{"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/1xxx/CVE-2023-1513.json","cna_assigner":"redhat","cwe_ids":["CWE-665"]},"references":[{"type":"WEB","url":"https://lore.kernel.org/kvm/20230214103304.3689213-1-gregkh%40linuxfoundation.org/"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/1xxx/CVE-2023-1513.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2023-1513"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2179892"},{"type":"FIX","url":"https://github.com/torvalds/linux/commit/2c10b61421a28e95a46ab489fd56c0f442ff6952"},{"type":"ARTICLE","url":"https://lists.debian.org/debian-lts-announce/2023/05/msg00005.html"},{"type":"ARTICLE","url":"https://lists.debian.org/debian-lts-announce/2023/05/msg00006.html"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/torvalds/linux","events":[{"introduced":"c9c3395d5e3dcc6daee66c6908354d47bf98cb0c"},{"fixed":"2c10b61421a28e95a46ab489fd56c0f442ff6952"}],"database_specific":{"extracted_events":[{"strategy":"StandaloneSingleVersion","range":[{"introduced":"Fixed in kernel 6.2"},{"last_affected":"Fixed in kernel 6.2"}],"source":"AFFECTED_FIELD"},{"source":"REFERENCES_COMMIT","range":[{"fixed":"2c10b61421a28e95a46ab489fd56c0f442ff6952"}]}]}}],"versions":["Fixed in kernel 6.2"],"database_specific":{"vanir_signatures_modified":"2026-10-22T15:55:33Z","source":"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2023-1513.json","vanir_signatures":[{"target":{"file":"arch/x86/kvm/x86.c"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["250802085504415937741697396445899494278","197824333279395500018662869320878553741","235139031041870278498320739631309956485","219137035002760195663479265658690073815","250976765452180103878989733669357963893","249300712133050611276313975120937472061","41558555924555565469845226490836075476","128453528291737945263013383782933089874","121992741156330053332515258943500417631"]},"id":"CVE-2023-1513-3ad248ec","signature_type":"Line","signature_version":"v1","source":"https://github.com/torvalds/linux/commit/2c10b61421a28e95a46ab489fd56c0f442ff6952"},{"deprecated":false,"digest":{"length":342,"function_hash":"159555496356222269341632007985778608139"},"id":"CVE-2023-1513-f791078b","signature_type":"Function","signature_version":"v1","source":"https://github.com/torvalds/linux/commit/2c10b61421a28e95a46ab489fd56c0f442ff6952","target":{"file":"arch/x86/kvm/x86.c","function":"kvm_vcpu_ioctl_x86_get_debugregs"}}]}}],"schema_version":"1.9.2","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N"}]}