Lucene search
+L

CVE-2023-3640

🗓️ 24 Jul 2023 15:19:29Reported by redhatType 
cve
 cve
🔗 web.nvd.nist.gov👁 267 Views🌐 WEB

A possible unauthorized memory access flaw in Linux kernel's cpu_entry_area mapping of X86 CPU data to memory, allowing local user to guess the location of important data

Related
Detection
Affected
Refs
Paths
NVD
[
  {
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 6",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "kernel",
    "defaultStatus": "unaffected",
    "cpes": [
      "cpe:/o:redhat:enterprise_linux:6"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 7",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "kernel",
    "defaultStatus": "unaffected",
    "cpes": [
      "cpe:/o:redhat:enterprise_linux:7"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 7",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "kernel-rt",
    "defaultStatus": "unaffected",
    "cpes": [
      "cpe:/o:redhat:enterprise_linux:7"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 8",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "kernel",
    "defaultStatus": "affected",
    "cpes": [
      "cpe:/o:redhat:enterprise_linux:8"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 8",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "kernel-rt",
    "defaultStatus": "affected",
    "cpes": [
      "cpe:/o:redhat:enterprise_linux:8"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 9",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "kernel",
    "defaultStatus": "affected",
    "cpes": [
      "cpe:/o:redhat:enterprise_linux:9"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 9",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "kernel-rt",
    "defaultStatus": "affected",
    "cpes": [
      "cpe:/o:redhat:enterprise_linux:9"
    ]
  }
]
ParameterPositionPathDescriptionCWE
ioctl command 0x55path/dev/sevenKernel local privilege escalation via crafted ioctl interactions with a vulnerable device and per-cpu entry area handling (EntryBleed/ROP style).CWE-203, CWE-385
ioctl command 0x5555 with arg 0xfffffe0000000000+4path/dev/sevenKernel local privilege escalation via crafted ioctl interactions with a vulnerable device and per-cpu entry area handling (EntryBleed/ROP style).CWE-203, CWE-385
ioctl command 0x6666 with arg 0xfffffe0000010f60path/dev/sevenKernel local privilege escalation via crafted ioctl interactions with a vulnerable device and per-cpu entry area handling (EntryBleed/ROP style).CWE-203, CWE-385

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

21 Jul 2026 20:05Current
6.7Medium risk
Vulners AI Score6.7
CVSS 3.17 - 7.8
EPSS0.00761
SSVC
267