Lucene search
Ubuntu.comUB:CVE-2022-4543HistoryJan 11, 2023 - 12:00 a.m.
CVE-2022-4543
2023-01-1100:00:00
ubuntu.com
ubuntu.com
52
linux kernel
page table isolation
entrybleed
kpti
kaslr
prefetch
tlb timing
intel
bugzilla
redhat
suse
entrybleed
side-channels
5.5 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
0.0004 Low
EPSS
Percentile
5.1%
A flaw named “EntryBleed” was found in the Linux Kernel Page Table
Isolation (KPTI). This issue could allow a local attacker to leak KASLR
base via prefetch side-channels based on TLB timing for Intel systems.
Bugs
- <https://bugzilla.redhat.com/show_bug.cgi?id=2153871>
- <https://bugzilla.suse.com/show_bug.cgi?id=1206463>
Notes
| Author | Note |
|---|---|
| sbeattie | unfixed upstream as of 2023.01.10 |
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| ubuntu | 18.04 | noarch | linux | < any | UNKNOWN |
| ubuntu | 20.04 | noarch | linux | < any | UNKNOWN |
| ubuntu | 22.04 | noarch | linux | < any | UNKNOWN |
| ubuntu | 23.10 | noarch | linux | < any | UNKNOWN |
| ubuntu | 24.04 | noarch | linux | < any | UNKNOWN |
| ubuntu | 14.04 | noarch | linux | < any | UNKNOWN |
| ubuntu | 16.04 | noarch | linux | < any | UNKNOWN |
| ubuntu | 20.04 | noarch | linux-aws | < any | UNKNOWN |
| ubuntu | 22.04 | noarch | linux-aws | < any | UNKNOWN |
| ubuntu | 23.10 | noarch | linux-aws | < any | UNKNOWN |
Related
redhatcve
redhatcve
CVE-2022-4543
2022-12-19 07:35:08
githubexploit
githubexploit
cve
cve
CVE-2022-4543
2023-01-11 15:15:09
nvd
nvd
CVE-2022-4543
2023-01-11 15:15:09
cbl_mariner
cbl_mariner
CVE-2022-4543 affecting package kernel 5.10.189.1-1
2024-07-02 15:09:54
CVE-2022-4543 affecting package kernel 5.15.160.1-1
2024-07-02 15:09:59
prion
prion
Code injection
2023-01-11 15:15:00
cvelist
cvelist
CVE-2022-4543
2023-01-11 00:00:00
debiancve
debiancve
CVE-2022-4543
2023-01-11 15:15:09
nessus
nessus
RHEL 8 : kernel (Unpatched Vulnerability)
2024-05-11 00:00:00
RHEL 7 : kernel (Unpatched Vulnerability)
2024-06-03 00:00:00
RHEL 7 : kernel (Unpatched Vulnerability)
2024-05-11 00:00:00
avleonov
avleonov
5.5 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
0.0004 Low
EPSS
Percentile
5.1%
Related for UB:CVE-2022-4543