CVE-2023-3640

SCTF2023kernelpwn SCTF 2023 カーネルpwn 余談ですが、筆者は2024年卒業予定の学部生で、今年の秋採用に参加しています。お気軽にご連絡ください sycrop この問題で問いたいのは次の2点です。 1. cpu entry areaマッピング領域の先頭付近には、カーネルtextセグメントとのオフセットが固定されたアドレスがいくつかあります。詳細は下図を参照してください。これは小さなトリックで、初出はGoogleのKCTFで、その後国際大会で何度か登場しました。 1. ユーザー態でハードウェアブレークポイントをトリガーする方法により、レジスタ内容をper cpu...

EUVD-2023-44284

Malicious code in bioql PyPI...

CVE-2023-3640

A possible unauthorized memory access flaw was found in the Linux kernel's cpuentryarea mapping of X86 CPU data to memory, where a user may guess the location of exception stacks or other important data. Based on the previous CVE-2023-0597, the 'Randomize per-cpu entry area' feature was implement...

DEBIAN-CVE-2023-3640

A possible unauthorized memory access flaw was found in the Linux kernel's cpuentryarea mapping of X86 CPU data to memory, where a user may guess the location of exception stacks or other important data. Based on the previous CVE-2023-0597, the 'Randomize per-cpu entry area' feature was implement...

CVE-2023-3640 Kernel: x86/mm: a per-cpu entry area leak was identified through the init_cea_offsets function when prefetchnta and prefetcht2 instructions being used for the per-cpu entry area mapping to the user space

A possible unauthorized memory access flaw was found in the Linux kernel's cpuentryarea mapping of X86 CPU data to memory, where a user may guess the location of exception stacks or other important data. Based on the previous CVE-2023-0597, the 'Randomize per-cpu entry area' feature was implement...

CVE-2023-3640 Kernel: x86/mm: a per-cpu entry area leak was identified through the init_cea_offsets function when prefetchnta and prefetcht2 instructions being used for the per-cpu entry area mapping to the user space

A possible unauthorized memory access flaw was found in the Linux kernel's cpuentryarea mapping of X86 CPU data to memory, where a user may guess the location of exception stacks or other important data. Based on the previous CVE-2023-0597, the 'Randomize per-cpu entry area' feature was implement...

CVE-2023-3640

A possible unauthorized memory access flaw was found in the Linux kernel's cpuentryarea mapping of X86 CPU data to memory, where a user may guess the location of exception stacks or other important data. Based on the previous CVE-2023-0597, the 'Randomize per-cpu entry area' feature was implement...

Fedora 37 : kernel (2023-4006357f7e)

The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-4006357f7e advisory. The 6.1.9 stable kernel update contains a number of important fixes across the tree. Tenable has extracted the preceding description block directly...