CVE-2023-3640

🗓️ 24 Jul 2023 15:19:29Reported by redhatType

cve🔗 web.nvd.nist.gov👁 233 Views🌐 WEB

A possible unauthorized memory access flaw in Linux kernel's cpu_entry_area mapping of X86 CPU data to memory, allowing local user to guess the location of important data

Reporter	Title	Published	Views	Family All 117
GithubExploit	Exploit for Observable Discrepancy in Linux Linux_Kernel	20 Jun 202306:21	–	githubexploit
BDU FSTEC	The vulnerability of the init_cea_offsets() function in the /arch/x86/mm/cpuEntryArea.c file of the Linux kernel’s memory management subsystem allows a attacker to access protected information and enhance their privileges.	24 Jul 202300:00	–	bdu_fstec
Chainguard	CVE-2023-3640 vulnerabilities	9 Jan 202619:17	–	cgr
Circl	CVE-2023-3640	12 Jul 202317:29	–	circl
CNNVD	Linux kernel 安全漏洞	24 Jul 202300:00	–	cnnvd
Cvelist	CVE-2023-3640 Kernel: x86/mm: a per-cpu entry area leak was identified through the init_cea_offsets function when prefetchnta and prefetcht2 instructions being used for the per-cpu entry area mapping to the user space	24 Jul 202315:19	–	cvelist
Debian CVE	CVE-2023-3640	24 Jul 202315:19	–	debiancve
EUVD	EUVD-2023-44284	3 Oct 202520:07	–	euvd
NVD	CVE-2023-3640	24 Jul 202316:15	–	nvd
OSV	CGA-FWWG-5XV9-V2QJ	7 Jan 202613:00	–	osv

NVD

Vulners

Node

linux linux_kernelMatch-

Node

redhat enterprise_linuxMatch8.0

redhat enterprise_linuxMatch9.0

[
  {
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 9",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "kernel",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "0:5.14.0-362.8.1.el9_3",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:enterprise_linux:9::appstream",
      "cpe:/a:redhat:enterprise_linux:9::crb",
      "cpe:/a:redhat:enterprise_linux:9::nfv",
      "cpe:/a:redhat:enterprise_linux:9::realtime",
      "cpe:/o:redhat:enterprise_linux:9::baseos"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 9",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "kernel",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "0:5.14.0-362.8.1.el9_3",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:enterprise_linux:9::appstream",
      "cpe:/a:redhat:enterprise_linux:9::crb",
      "cpe:/a:redhat:enterprise_linux:9::nfv",
      "cpe:/a:redhat:enterprise_linux:9::realtime",
      "cpe:/o:redhat:enterprise_linux:9::baseos"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 6",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "kernel",
    "defaultStatus": "unaffected",
    "cpes": [
      "cpe:/o:redhat:enterprise_linux:6"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 7",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "kernel",
    "defaultStatus": "unaffected",
    "cpes": [
      "cpe:/o:redhat:enterprise_linux:7"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 7",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "kernel-rt",
    "defaultStatus": "unaffected",
    "cpes": [
      "cpe:/o:redhat:enterprise_linux:7"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 8",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "kernel",
    "defaultStatus": "affected",
    "cpes": [
      "cpe:/o:redhat:enterprise_linux:8"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 8",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "kernel-rt",
    "defaultStatus": "affected",
    "cpes": [
      "cpe:/o:redhat:enterprise_linux:8"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 9",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "kernel-rt",
    "defaultStatus": "affected",
    "cpes": [
      "cpe:/o:redhat:enterprise_linux:9"
    ]
  }
]

Source	Link
access	www.access.redhat.com/errata/RHSA-2023:6583
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
access	www.access.redhat.com/security/cve/CVE-2023-3640

Parameter	Position	Path	Description	CWE
0x55	path	/dev/seven	Kernel exploit involving per-cpu entry area leakage and ROP/privilege escalation via ioctl interactions with /dev/seven	CWE-385, CWE-203
0x5555	path	/dev/seven	Kernel exploit involving per-cpu entry area leakage and ROP/privilege escalation via ioctl interactions with /dev/seven	CWE-385, CWE-203
0xfffffe0000000000+4	path	/dev/seven	Kernel exploit involving per-cpu entry area leakage and ROP/privilege escalation via ioctl interactions with /dev/seven	CWE-385, CWE-203
0x6666	path	/dev/seven	Kernel exploit involving per-cpu entry area leakage and ROP/privilege escalation via ioctl interactions with /dev/seven	CWE-385, CWE-203
0xfffffe0000010f60	path	/dev/seven	Kernel exploit involving per-cpu entry area leakage and ROP/privilege escalation via ioctl interactions with /dev/seven	CWE-385, CWE-203

26 Jun 2026 11:16Current

6.7Medium risk

Vulners AI Score6.7

CVSS 3.17 - 7.8

EPSS0.00761

SSVC