Description
A Marvin vulnerability side-channel leakage was found in the RSA decryption operation in the Linux Kernel. This issue may allow a network attacker to decrypt ciphertexts or forge signatures, limiting the services that use that private key.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Red Hat | Red Hat Enterprise Linux 8 | — | — |
| Red Hat | Red Hat Enterprise Linux 9 | — | — |
| Red Hat | Red Hat Enterprise Linux 9.0 Extended Update Support | — | — |
| Red Hat | Red Hat Enterprise Linux 9.2 Extended Update Support | — | — |
| Red Hat | Red Hat Enterprise Linux 6 | — | — |
| Red Hat | Red Hat Enterprise Linux 7 | — | — |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | linux | No fix yet | — |
| Debian 13 | linux | No fix yet | — |
| Debian 12 | linux | No fix yet | — |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu Nvidia-BlueField 24.04 LTS | linux-bluefield | No fix yet | — |
| Ubuntu Nvidia-BlueField 22.04 LTS | linux-bluefield | No fix yet | — |
| Ubuntu 26.10 | linux +8 | No fix yet | — |
| Ubuntu 26.04 LTS | linux +14 | No fix yet | — |
| Ubuntu 25.10 | linux +8 | No fix yet | — |
Show 20 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 24.04 LTS | linux +53 | No fix yet | — |
| Ubuntu 22.04 LTS | linux +57 | No fix yet | — |
| Ubuntu 20.04 LTS | linux-gke +28 | No fix yet | — |
| Ubuntu 18.04 LTS | linux-gcp +14 | No fix yet | — |
| Ubuntu 16.04 LTS | linux-hwe-edge | No fix yet | — |
| Ubuntu Pro Realtime 24.04 LTS | linux-realtime +3 | No fix yet | — |
| Ubuntu Pro Realtime 22.04 LTS | linux-realtime +2 | No fix yet | — |
| Ubuntu Pro FIPS 20.04 LTS | linux-fips +3 | No fix yet | — |
| Ubuntu Pro FIPS 18.04 LTS | linux-fips +3 | No fix yet | — |
| Ubuntu Pro FIPS 16.04 LTS | linux-fips | No fix yet | — |
| Ubuntu Pro FIPS-updates 24.04 LTS | linux-fips +3 | No fix yet | — |
| Ubuntu Pro FIPS-updates 22.04 LTS | linux-fips +3 | No fix yet | — |
| Ubuntu Pro FIPS-updates 20.04 LTS | linux-fips +3 | No fix yet | — |
| Ubuntu Pro FIPS-updates 18.04 LTS | linux-fips +3 | No fix yet | — |
| Ubuntu Pro FIPS-updates 16.04 LTS | linux-fips | No fix yet | — |
| Ubuntu Pro FIPS-preview 22.04 LTS | linux-fips +3 | No fix yet | — |
| Ubuntu Pro 20.04 LTS | linux +21 | No fix yet | — |
| Ubuntu Pro 18.04 LTS | linux +12 | No fix yet | — |
| Ubuntu Pro 16.04 LTS | linux +7 | No fix yet | — |
| Ubuntu Pro 14.04 LTS | linux +3 | No fix yet | — |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 9 | bpftool | 7.3.0-427.16.1.el9_4 | RHSA-2024:2758 |
| RHEL 9 | rv +64 | 5.14.0-427.16.1.el9_4 | RHSA-2024:2758 |
| RHEL 8 | kernel-rt +12 | 4.18.0-553.5.1.rt7.346.el8_10 | RHSA-2024:3627 |
| RHEL 8 | perf +26 | 4.18.0-553.5.1.el8_10 | RHSA-2024:3618 |
Show 2 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 9.2 EUS | bpftool | 7.0.0-284.62.1.el9_2 | RHSA-2024:1881 |
| RHEL 9.2 EUS | kernel-rt +14 | 5.14.0-284.62.1.rt14.347.el9_2 | RHSA-2024:1882 |
| RHEL 9.2 EUS | perf +48 | 5.14.0-284.62.1.el9_2 | RHSA-2024:1881 |
| RHEL 9.0 EUS | kernel-rt +12 | 5.14.0-70.101.1.rt21.173.el9_0 | RHSA-2024:3414 |
| RHEL 9.0 EUS | perf +29 | 5.14.0-70.101.1.el9_0 | RHSA-2024:3421 |
AlmaLinux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux 9 | bpftool | 7.3.0-427.16.1.el9_4 | ALSA-2024:2758 |
| AlmaLinux 9 | rv +60 | 5.14.0-427.16.1.el9_4 | ALSA-2024:2758 |
| AlmaLinux 8 | kernel-rt +11 | 4.18.0-553.5.1.rt7.346.el8_10 | ALSA-2024:3627 |
| AlmaLinux 8 | perf +24 | 4.18.0-553.5.1.el8_10 | ALSA-2024:3618 |
Rocky Linux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Rocky Linux 9 | kernel | 5.14.0-427.16.1.el9_4 | RLSA-2024:2758 |
| Rocky Linux 8 | kernel | 4.18.0-553.5.1.el8_10 | RLSA-2024:3618 |
| Rocky Linux 8 | kernel-rt | 4.18.0-553.5.1.rt7.346.el8_10 | RLSA-2024:3627 |
Oracle Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Oracle Linux 9 | bpftool | 7.3.0-427.16.1.el9_4 | ELSA-2024-2758 |
| Oracle Linux 9 | rv +25 | 5.14.0-427.16.1.el9_4 | ELSA-2024-2758 |
| Oracle Linux 8 | perf +19 | 4.18.0-553.5.1.el8_10 | ELSA-2024-3618 |
Advisories 17
- RHSA-2024:3627 Red Hat Security Advisory: kernel-rt security and bug fix update Red Hat Security Advisories (RHSA) · Nov 13, 2026
- ALSA-2024:2758 Moderate: kernel security and bug fix update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2024:3627 Moderate: kernel-rt security and bug fix update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2024:3618 Moderate: kernel update AlmaLinux Security Advisories · Oct 29, 2026
- RHSA-2024:2758 Red Hat Security Advisory: kernel security and bug fix update Red Hat Security Advisories (RHSA) · Oct 17, 2026
- RHSA-2024:3421 Red Hat Security Advisory: kernel security and bug fix update Red Hat Security Advisories (RHSA) · Oct 17, 2026
- RHSA-2024:3618 Red Hat Security Advisory: kernel update Red Hat Security Advisories (RHSA) · Oct 15, 2026
- RHSA-2024:3414 Red Hat Security Advisory: kernel-rt security and bug fix update Red Hat Security Advisories (RHSA) · Aug 26, 2026
- RHSA-2024:1882 Red Hat Security Advisory: kernel-rt security and bug fix update Red Hat Security Advisories (RHSA) · Aug 26, 2026
- RHSA-2024:1881 Red Hat Security Advisory: kernel security and bug fix update Red Hat Security Advisories (RHSA) · Aug 26, 2026
- WID-SEC-2024-1226 Red Hat OpenShift: Mehrere Schwachstellen BSI CERT-Bund (WID) · May 11, 2026
- RLSA-2024:2758 Moderate: kernel security and bug fix update Rocky Linux Security Advisories · Feb 5, 2026
- RLSA-2024:3627 Moderate: kernel-rt security and bug fix update Rocky Linux Security Advisories · Feb 4, 2026
- RLSA-2024:3618 Moderate: kernel update Rocky Linux Security Advisories · Feb 4, 2026
- WID-SEC-2024-0289 Linux Kernel: Schwachstelle ermöglicht Offenlegung von Informationen BSI CERT-Bund (WID) · Apr 10, 2025
- ELSA-2024-3618 Moderate: kernel update (Oracle Linux 8) Oracle Linux Security Advisories (ELSA) · Jun 5, 2024
- ELSA-2024-2758 Moderate: kernel security and bug fix update (Oracle Linux 9) Oracle Linux Security Advisories (ELSA) · May 8, 2024
References
- RHSA-2024:1881 vendor-advisory
- RHSA-2024:1882 vendor-advisory
- RHSA-2024:2758 vendor-advisory
- RHSA-2024:3414 vendor-advisory
- RHSA-2024:3421 vendor-advisory
- RHSA-2024:3618 vendor-advisory
- RHSA-2024:3627 vendor-advisory
- https://access.redhat.com/security/cve/CVE-2023-6240 vdb-entry
- RHBZ#2250843 issue-tracking
- https://people.redhat.com/~hkario/marvin/
- https://securitypitfalls.wordpress.com/2023/10/16/experiment-with-side-channel-attacks-yourself/