CVE-2023-1637CWE-226

A flaw that boot CPU could be vulnerable for the speculative execution behavior kind of attacks in the Linux kernel X86 CPU Power management options…

Medium · published March 27, 2023

CVSS v3.1
5.5
EPSS
0%
Percentile
11.9
In the wild
Unconfirmed
What it is

A flaw that boot CPU could be vulnerable for the speculative execution behavior kind of attacks in the Linux kernel X86 CPU Power management options functionality was found in the way user resuming CPU from suspend-to-RAM. A local user could use this flaw to potentially get unauthorized access to some memory of the CPU similar to the speculative execution behavior kind of attacks.

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00220 · 11.9th percentile
Weakness
CWE-226 · Sensitive Information in Resource Not Removed Before Reuse
Published
2023-03-27T00:00Z
EPSS history
Timeline
  • 27 MAR 00:00Z
    A flaw that boot CPU could be vulnerable for the speculative execution behavior kind of attacks in the Linux kernel X86 CPU Power management options…
    cvelistv5