CVE-2023-0597

2023-02-2300:00:00

CWE-200

redhat

www.cve.org

linux

kernel

cpu mapping

memory leak

local user access

6.3 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

JSON

A flaw possibility of memory leak in the Linux kernel cpu_entry_area mapping of X86 CPU data to memory was found in the way user can guess location of exception stack(s) or other important data. A local user could use this flaw to get access to some important data with expected location in memory.

CNA Affected

[
  {
    "vendor": "n/a",
    "product": "Kernel",
    "versions": [
      {
        "version": "Linux kernel 6.2-rc1",
        "status": "affected"
      }
    ]
  }
]