CVE-2024-0564

Katalog CVE

CVSS 6.5 · Medium EPSS 0,62%

Kerentanan Observable Discrepancy pada linux kernel, redhat enterprise linux. Skor CVSS 3.1 6.5 (Medium) menurut NVD.

Deskripsi (NVD)

A flaw was found in the Linux kernel's memory deduplication mechanism. The max page sharing of Kernel Samepage Merging (KSM), added in Linux kernel version 4.4.0-96.119, can create a side channel. When the attacker and the victim share the same host and the default setting of KSM is "max page sharing=256", it is possible for the attacker to time the unmap to merge with the victim's page. The unmapping time depends on whether it merges with the victim's page and additional physical pages are created beyond the KSM's "max page share". Through these operations, the attacker can leak the victim's page.

Rincian

Terbit di NVD

30 Januari 2024

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

6.5 (Medium), sumber NVD
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-203: Observable Discrepancy

EPSS (30 hari)

0,62% peluang dieksploitasi; lebih tinggi dari 48,4% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://access.redhat.com/security/cve/CVE-2024-0564 advisory pihak ketiga
• https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1680513 exploit · issue tracking
• https://bugzilla.redhat.com/show_bug.cgi?id=2258514 issue tracking
• https://link.springer.com/conference/wisa not applicable
• https://wisa.or.kr/accepted not applicable