PT-2022-6067 · Linux+1 · Linux Kernel+1

Willsroot · Published 2022-12-17 · Updated 2026-04-20 · CVE-2022-4543

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Linux Kernel (affected versions not specified)

Description A flaw named "EntryBleed" was found in the Linux Kernel Page Table Isolation (KPTI). This issue could allow a local attacker to leak KASLR base via prefetch side-channels based on TLB timing for Intel systems. The vulnerability is related to the lack of protection for service data, which can be exploited to obtain the Kernel ASLR base address and gain access to kernel memory.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Side Channel Attack

Information Disclosure

Weakness Enumeration

CWE-203

CWE-200

Related Identifiers

AZL-12989

AZL-34862

BDU:2023-00001

CVE-2022-4543

ECHO-2DDC-4A3F-877A

Affected Products

Debian

Linux Kernel

References · 26

• 🔥 https://openwall.com/lists/oss-security/2022/12/16/3 · Exploit
• 🔥 https://willsroot.io/2022/12/entrybleed.html · Exploit
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-4543 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-4543 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2022-4543 · Security Note
• https://osv.dev/vulnerability/AZL-34862 · Vendor Advisory
• https://osv.dev/vulnerability/ROOT-OS-DEBIAN-13-CVE-2022-4543 · Vendor Advisory
• https://osv.dev/vulnerability/AZL-12989 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-4543 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-4543 · Security Note
• https://osv.dev/vulnerability/ROOT-OS-DEBIAN-12-CVE-2022-4543 · Vendor Advisory
• https://osv.dev/vulnerability/ROOT-OS-UBUNTU-2404-CVE-2022-4543 · Vendor Advisory
• https://bdu.fstec.ru/vul/2023-00001 · Security Note
• https://ubuntu.com/security/CVE-2022-4543 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2022-4543 · Vendor Advisory