Lucene search
+L

CVE-2023-3640

🗓️ 24 Jul 2023 15:19:29Reported by redhatType 
cve
 cve
🔗 web.nvd.nist.gov👁 239 Views🌐 WEB

A possible unauthorized memory access flaw in Linux kernel's cpu_entry_area mapping of X86 CPU data to memory, allowing local user to guess the location of important data

Related
Detection
Affected
Refs
Paths
NVD
[
  {
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 6",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "kernel",
    "defaultStatus": "unaffected",
    "cpes": [
      "cpe:/o:redhat:enterprise_linux:6"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 7",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "kernel",
    "defaultStatus": "unaffected",
    "cpes": [
      "cpe:/o:redhat:enterprise_linux:7"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 7",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "kernel-rt",
    "defaultStatus": "unaffected",
    "cpes": [
      "cpe:/o:redhat:enterprise_linux:7"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 8",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "kernel",
    "defaultStatus": "affected",
    "cpes": [
      "cpe:/o:redhat:enterprise_linux:8"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 8",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "kernel-rt",
    "defaultStatus": "affected",
    "cpes": [
      "cpe:/o:redhat:enterprise_linux:8"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 9",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "kernel",
    "defaultStatus": "affected",
    "cpes": [
      "cpe:/o:redhat:enterprise_linux:9"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 9",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "kernel-rt",
    "defaultStatus": "affected",
    "cpes": [
      "cpe:/o:redhat:enterprise_linux:9"
    ]
  }
]
ParameterPositionPathDescriptionCWE
0x55binary/dev/sevenKernel exploitation using device /dev/seven via ioctl to leak/overwrite kernel state and escalate privileges (ret2hbp/ROP technique described in the document).CWE-385CWE-203
0x5555binary/dev/sevenKernel exploitation using device /dev/seven via ioctl to leak/overwrite kernel state and escalate privileges (ret2hbp/ROP technique described in the document).CWE-385CWE-203
0x6666binary/dev/sevenKernel exploitation using device /dev/seven via ioctl to leak/overwrite kernel state and escalate privileges (ret2hbp/ROP technique described in the document).CWE-385CWE-203
0xfffffe0000010f60binary/dev/sevenKernel exploitation using device /dev/seven via ioctl to leak/overwrite kernel state and escalate privileges (ret2hbp/ROP technique described in the document).CWE-385CWE-203

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

21 Jul 2026 20:05Current
6.7Medium risk
Vulners AI Score6.7
CVSS 3.17 - 7.8
EPSS0.00761
SSVC
239