CVE-2022-4543

Description

A flaw named "EntryBleed" was found in the Linux Kernel Page Table Isolation (KPTI). This issue could allow a local attacker to leak KASLR base via prefetch side-channels based on TLB timing for Intel systems.

References

https://github.com/Ha0-Y/kernel-exploit-cve

https://github.com/Ha0-Y/LinuxKernelExploits

https://www.willsroot.io/2022/12/entrybleed.html

https://www.openwall.com/lists/oss-security/2022/12/16/3

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS