CVE-2023-1637

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2023-1637
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-1637.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2023-1637
Downstream
Related
Published
2023-03-27T00:00:00Z
Modified
2026-07-08T06:36:25.346654736Z
Severity
  • 5.5 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N CVSS Calculator
Summary
[none]
Details

A flaw that boot CPU could be vulnerable for the speculative execution behavior kind of attacks in the Linux kernel X86 CPU Power management options functionality was found in the way user resuming CPU from suspend-to-RAM. A local user could use this flaw to potentially get unauthorized access to some memory of the CPU similar to the speculative execution behavior kind of attacks.

Database specific 
{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/1xxx/CVE-2023-1637.json",
    "cwe_ids": [
        "CWE-226"
    ],
    "cna_assigner": "redhat"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git
Events
Introduced
ce522ba9ef7e2d9fb22a39eb3371c0c64e2a433e
Last affected
ce522ba9ef7e2d9fb22a39eb3371c0c64e2a433e
Database specific 
{
    "source": "AFFECTED_FIELD",
    "extracted_events": [
        {
            "introduced": "Linux kernel 5.18-rc2"
        },
        {
            "last_affected": "Linux kernel 5.18-rc2"
        }
    ]
}

Affected versions

Linux kernel 5.*
Linux kernel 5.18-rc2
v5.*
v5.18-rc2

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-1637.json"