跳转到帖子

Huawei EulerOS: CVE-2023-1637: kernel security update

recommended_posts

发布于
  • Members

Huawei EulerOS: CVE-2023-1637: kernel security update

Severity
5
CVSS
(AV:L/AC:L/Au:S/C:C/I:N/A:N)
Published
03/27/2023
Created
07/10/2023
Added
07/10/2023
Modified
01/28/2025

Description

A flaw that boot CPU could be vulnerable for the speculative execution behavior kind of attacks in the Linux kernel X86 CPU Power management options functionality was found in the way user resuming CPU from suspend-to-RAM. A local user could use this flaw to potentially get unauthorized access to some memory of the CPU similar to the speculative execution behavior kind of attacks.

Solution(s)

  • huawei-euleros-2_0_sp9-upgrade-kernel
  • huawei-euleros-2_0_sp9-upgrade-kernel-tools
  • huawei-euleros-2_0_sp9-upgrade-kernel-tools-libs
  • huawei-euleros-2_0_sp9-upgrade-python3-perf

References

  • https://attackerkb.com/topics/cve-2023-1637
  • CVE - 2023-1637
  • EulerOS-SA-2023-2315
  • 查看数 697
  • 已创建
  • 最后回复