CVE-2023-3640

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue is related to the init cea offsets() function in the /arch/x86/mm/cpu entry area.c module of the Linux kernel's memory management subsystem. It concerns the accessibility of the per-cpu area of memory to user address space. Exploitation of this issue may allow an attacker to access protected information and potentially escalate their privileges. A feature called 'Randomize per-cpu entry area' was implemented to mitigate similar issues, but despite this, there is still a risk of per-cpu entry area leaks. This could enable a local user to gain access to important data in memory and potentially escalate their privileges on the system.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.