kernel: Marvin vulnerability side-channel leakage in the RSA decryption operation

🗓️ 18 Apr 2024 01:50:53Reported by RedHatType

Marvin side-channel leakage in RSA decryption in the Linux kernel may allow a network attacker to decrypt ciphertexts or forge signatures with the private key.

Reporter	Title	Published	Views	Family All 91
IBM Security Bulletins	Security Bulletin: IBM Technical Suppport Appliance - possible security flaws or denial of service	15 Apr 202502:42	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in the Linux kernel affects IBM SAN Volume Controller, IBM Storwize, IBM Spectrum Virtualize and IBM FlashSystem products	26 Feb 202515:36	–	ibm
IBM Security Bulletins	Security Bulletin: There are multiple vulnerabilities that can affect IBM Storage Scale System that are now included	4 Feb 202519:32	–	ibm
Tenable Nessus	AlmaLinux 8 : kernel update (Medium) (ALSA-2024:3618)	5 Jun 202400:00	–	nessus
Tenable Nessus	AlmaLinux 8 : kernel-rt (ALSA-2024:3627)	5 Jun 202400:00	–	nessus
Tenable Nessus	CentOS 9 : kernel-5.14.0-430.el9	26 Apr 202400:00	–	nessus
Tenable Nessus	MiracleLinux 9 : kernel-5.14.0-427.16.1.el9_4 (AXSA:2024-8387:14)	20 Jan 202600:00	–	nessus
Tenable Nessus	MiracleLinux 8 : kernel-4.18.0-553.5.1.el8_10 (AXSA:2024-8481:17)	20 Jan 202600:00	–	nessus
Tenable Nessus	Oracle Linux 9 : kernel (ELSA-2024-2758)	9 May 202400:00	–	nessus
Tenable Nessus	Oracle Linux 8 : kernel (ELSA-2024-3618)	6 Jun 202400:00	–	nessus

OS	OS Version	Architecture	Package	Package Version	Filename
Red Hat Enterprise Linux	9.2	x86_64	kernel-rt	5.14.0-284.62.1.rt14.347.el9_2	kernel-rt-5.14.0-284.62.1.rt14.347.el9_2.x86_64.rpm
Red Hat Enterprise Linux	9.2	x86_64	kernel-rt-core	5.14.0-284.62.1.rt14.347.el9_2	kernel-rt-core-5.14.0-284.62.1.rt14.347.el9_2.x86_64.rpm
Red Hat Enterprise Linux	9.2	x86_64	kernel-rt-debug	5.14.0-284.62.1.rt14.347.el9_2	kernel-rt-debug-5.14.0-284.62.1.rt14.347.el9_2.x86_64.rpm
Red Hat Enterprise Linux	9.2	x86_64	kernel-rt-debug-core	5.14.0-284.62.1.rt14.347.el9_2	kernel-rt-debug-core-5.14.0-284.62.1.rt14.347.el9_2.x86_64.rpm
Red Hat Enterprise Linux	9.2	x86_64	kernel-rt-debug-debuginfo	5.14.0-284.62.1.rt14.347.el9_2	kernel-rt-debug-debuginfo-5.14.0-284.62.1.rt14.347.el9_2.x86_64.rpm
Red Hat Enterprise Linux	9.2	x86_64	kernel-rt-debug-devel	5.14.0-284.62.1.rt14.347.el9_2	kernel-rt-debug-devel-5.14.0-284.62.1.rt14.347.el9_2.x86_64.rpm
Red Hat Enterprise Linux	9.2	x86_64	kernel-rt-debug-kvm	5.14.0-284.62.1.rt14.347.el9_2	kernel-rt-debug-kvm-5.14.0-284.62.1.rt14.347.el9_2.x86_64.rpm
Red Hat Enterprise Linux	9.2	x86_64	kernel-rt-debug-modules	5.14.0-284.62.1.rt14.347.el9_2	kernel-rt-debug-modules-5.14.0-284.62.1.rt14.347.el9_2.x86_64.rpm
Red Hat Enterprise Linux	9.2	x86_64	kernel-rt-debug-modules-core	5.14.0-284.62.1.rt14.347.el9_2	kernel-rt-debug-modules-core-5.14.0-284.62.1.rt14.347.el9_2.x86_64.rpm
Red Hat Enterprise Linux	9.2	x86_64	kernel-rt-debug-modules-extra	5.14.0-284.62.1.rt14.347.el9_2	kernel-rt-debug-modules-extra-5.14.0-284.62.1.rt14.347.el9_2.x86_64.rpm

Source	Link
access	www.access.redhat.com/security/cve/CVE-2023-6240
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
nvd	www.nvd.nist.gov/vuln/detail/CVE-2023-6240
people	www.people.redhat.com/~hkario/marvin/
securitypitfalls	www.securitypitfalls.wordpress.com/2023/10/16/experiment-with-side-channel-attacks-yourself/
cve	www.cve.org/CVERecord

28 Jun 2026 12:43Current

7.2High risk

Vulners AI Score7.2

CVSS 3.16.5

EPSS0.00969

SSVC

CWE-203