CVE-2022-4543

Name of the Vulnerable Software and Affected Versions Linux Kernel (affected versions not specified)

Description A flaw named "EntryBleed" was found in the Linux Kernel Page Table Isolation (KPTI). This issue could allow a local attacker to leak KASLR base via prefetch side-channels based on TLB timing for Intel systems. The vulnerability is related to the lack of protection for service data, which can be exploited to obtain the Kernel ASLR base address and gain access to kernel memory.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.