Medium WID-SEC-2023-1871 1 CVE

Linux Kernel: Schwachstelle ermöglicht Privilegieneskalation

Published Jul 24, 2023 · Updated Dec 16, 2024 · Revision 2 · de-DE

Vendor: IBM Vendor: Red Hat Product: Enterprise Linux Product: Storage Scale Platform: Linux

Summary

Ein lokaler Angreifer kann eine Schwachstelle im Linux Kernel ausnutzen, um seine Privilegien zu erhöhen.

Product

Der Kernel stellt den Kern des Linux Betriebssystems dar.

Vulnerabilities 1

High 7.0

CVE-2023-3640 Public exploit

Kernel: x86/mm: a per-cpu entry area leak was identified through the init_cea_offsets function when prefetchnta and prefetcht2 instructions being used for the per-cpu entry area mapping to the user space

A possible unauthorized memory access flaw was found in the Linux kernel's cpu_entry_area mapping of X86 CPU data to memory, where a user may guess the location of exception stacks or other important data. Based on the previous CVE-2023-0597, the 'Randomize p…

Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu

Jul 24, 2023

Revision history

2024-12-16 #2
Neue Updates von IBM aufgenommen
2023-07-24 #1
Initiale Fassung

References

Github Security Advisory GHSA-g854-mv2r-2r5h vom 2023-07-24
https://github.com/advisories/GHSA-g854-mv2r-2r5h
Red Hat Customer Portal vom 2023-07-24
https://access.redhat.com/security/cve/CVE-2023-3640
IBM Security Bulletin 7179045 vom 2024-12-16
https://www.ibm.com/support/pages/node/7179045