CVE-2022-4543 - A flaw named "EntryBleed" was found in the Linux Kernel Page Table Isolation (KPTI). This issue coul

CVE-2022-4543

Summary

A flaw named "EntryBleed" was found in the Linux Kernel Page Table Isolation (KPTI). This issue could allow a local attacker to leak KASLR base via prefetch side-channels based on TLB timing for Intel systems.

References

https://www.willsroot.io/2022/12/entrybleed.html
https://www.openwall.com/lists/oss-security/2022/12/16/3

Vulnerable Configurations

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

CVSS

Base:	None
Impact:
Exploitability:

CWE

CWE-203

CAPEC

Access

Vector	Complexity	Authentication

Impact

Confidentiality	Integrity	Availability

Last major update

19-01-2023 - 18:38

Published

11-01-2023 - 15:15

Last modified

19-01-2023 - 18:38