Wind River Support Network

HomeDefectsLIN1021-5526
Fixed

LIN1021-5526 : Security Advisory - linux - CVE-2023-1637

Created: Mar 27, 2023    Updated: Apr 7, 2023
Resolved Date: Mar 28, 2023
Found In Version: 10.21.20.1
Fix Version: 10.21.20.16
Severity: Standard
Applicable for: Wind River Linux LTS 21
Component/s: Kernel

Description

A flaw that boot CPU could be vulnerable for the speculative execution behavior kind of attacks in the Linux kernel X86 CPU Power management options functionality was found in the way user resuming CPU from suspend-to-RAM. A local user could use this flaw to potentially get unauthorized access to some memory of the CPU similar to the speculative execution behavior kind of attacks.

CREATE(Triage):(User=admin) CVE-2023-1637 (https://nvd.nist.gov/vuln/detail/CVE-2023-1637)

CVEs


Live chat
Online