CVE-2023-6240: Kernel: marvin vulnerability side-channel leakage in the rsa decryption operation

Modified

AliasesUBUNTU-CVE-2023-6240DEBIAN-CVE-2023-6240CGA-229w-c83m-m253+389 more

Published 04-02-2024Last modified 08-11-2025

Vulnerability summary

CVE-2023-6240 is a medium (CVSS 6.5) Observable Discrepancy vulnerability in linux linux_kernel. EPSS estimates a 0.97% chance of exploitation in the next 30 days, higher than 61.9% of scored vulnerabilities.

Priority

Routine

Not severe (CVSS 6.5, network access); no exploitation reported by the 5 checked sources

Source freshness unavailable

How is this decided?

CVSS score

6.5/10

010

Medium · v3.1 (CVE.org)

EPSS score

0.97%

0%100%

Low · 0.00 pp in 30 days

KEVNot listedNot listed by any tracked catalog.

RansomwareNot flaggedNo ransomware use recorded.

Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 7 · Related 1

RHSA-2024:1881 RHSA-2024:1882 RHSA-2024:2758 RHSA-2024:3414 RHSA-2024:3421 RHSA-2024:3618+2 more

Timeline

04-02-2024
PublishedVulnerability first disclosed.
08-11-2025
Last modifiedVulnerability information updated.

Description

A Marvin vulnerability side-channel leakage was found in the RSA decryption operation in the Linux Kernel. This issue may allow a network attacker to decrypt ciphertexts or forge signatures, limiting the services that use that private key.

CVSS metrics

5 scores · 5 sources · 1 version

v3.16.5

EPSS trend

Probability

0.97%

Chance of exploitation in the next 30 days

Percentile

62%

Versus all other CVEs

30-day change

No change 0.00 pp

From 0.97% on 04-10-2026

04-10-202603-11-2026

Known exploited

Compare KEV catalogs

CISA KEV

Not in the CISA KEV catalog.

ENISA CNW

Not in the ENISA CNW catalog.

CIRCL

Not in the CIRCL catalog.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

CWE-203Observable DiscrepancyThe product behaves differently or sends different responses under different circumstances in a way that is observable to an unauthorized actor.

Affected systems

Version check

Known conditions: network-reachable, no authentication, no user interaction (CVSS vector). Other conditions: not stated in public data.

Ubuntu150 products

linuxAll versions (No fix recorded)
linux-allwinner-5.19All versions (No fix recorded)
linux-awsAll versions (No fix recorded)
linux-aws-5.0All versions (No fix recorded)
linux-aws-5.11All versions (No fix recorded)

linux-aws-5.13All versions (No fix recorded)
linux-aws-5.15All versions (No fix recorded)
linux-aws-5.19All versions (No fix recorded)
linux-aws-5.3All versions (No fix recorded)
linux-aws-5.4All versions (No fix recorded)
linux-aws-5.8All versions (No fix recorded)
linux-aws-6.14All versions (No fix recorded)
linux-aws-6.17All versions (No fix recorded)
linux-aws-6.2All versions (No fix recorded)
linux-aws-6.5All versions (No fix recorded)
linux-aws-6.8All versions (No fix recorded)
linux-aws-7.0All versions (No fix recorded)
linux-aws-fipsAll versions (No fix recorded)
linux-aws-hweAll versions (No fix recorded)
linux-azureAll versions (No fix recorded)
linux-azure-4.15All versions (No fix recorded)
linux-azure-5.11All versions (No fix recorded)
linux-azure-5.13All versions (No fix recorded)
linux-azure-5.15All versions (No fix recorded)
linux-azure-5.19All versions (No fix recorded)
linux-azure-5.3All versions (No fix recorded)
linux-azure-5.4All versions (No fix recorded)
linux-azure-5.8All versions (No fix recorded)
linux-azure-6.11All versions (No fix recorded)
linux-azure-6.14All versions (No fix recorded)
linux-azure-6.17All versions (No fix recorded)
linux-azure-6.2All versions (No fix recorded)
linux-azure-6.5All versions (No fix recorded)
linux-azure-6.8All versions (No fix recorded)
linux-azure-7.0All versions (No fix recorded)
linux-azure-edgeAll versions (No fix recorded)
linux-azure-fdeAll versions (No fix recorded)
linux-azure-fde-5.15All versions (No fix recorded)
linux-azure-fde-5.19All versions (No fix recorded)
linux-azure-fde-6.14All versions (No fix recorded)
linux-azure-fde-6.17All versions (No fix recorded)
linux-azure-fde-6.2All versions (No fix recorded)
linux-azure-fde-6.8All versions (No fix recorded)
linux-azure-fde-7.0All versions (No fix recorded)
linux-azure-fipsAll versions (No fix recorded)
linux-azure-nvidiaAll versions (No fix recorded)
linux-azure-nvidia-6.14All versions (No fix recorded)
linux-bluefieldAll versions (No fix recorded)
linux-fipsAll versions (No fix recorded)
linux-gcpAll versions (No fix recorded)
linux-gcp-4.15All versions (No fix recorded)
linux-gcp-5.11All versions (No fix recorded)
linux-gcp-5.13All versions (No fix recorded)
linux-gcp-5.15All versions (No fix recorded)
linux-gcp-5.19All versions (No fix recorded)
linux-gcp-5.3All versions (No fix recorded)
linux-gcp-5.4All versions (No fix recorded)
linux-gcp-5.8All versions (No fix recorded)
linux-gcp-6.11All versions (No fix recorded)
linux-gcp-6.14All versions (No fix recorded)
linux-gcp-6.17All versions (No fix recorded)
linux-gcp-6.2All versions (No fix recorded)
linux-gcp-6.5All versions (No fix recorded)
linux-gcp-6.8All versions (No fix recorded)
linux-gcp-7.0All versions (No fix recorded)
linux-gcp-fipsAll versions (No fix recorded)
linux-gkeAll versions (No fix recorded)
linux-gke-4.15All versions (No fix recorded)
linux-gke-5.15All versions (No fix recorded)
linux-gke-5.4All versions (No fix recorded)
linux-gkeopAll versions (No fix recorded)
linux-gkeop-5.15All versions (No fix recorded)
linux-gkeop-5.4All versions (No fix recorded)
linux-hweAll versions (No fix recorded)
linux-hwe-5.11All versions (No fix recorded)
linux-hwe-5.13All versions (No fix recorded)
linux-hwe-5.15All versions (No fix recorded)
linux-hwe-5.19All versions (No fix recorded)
linux-hwe-5.4All versions (No fix recorded)
linux-hwe-5.8All versions (No fix recorded)
linux-hwe-6.11All versions (No fix recorded)
linux-hwe-6.14All versions (No fix recorded)
linux-hwe-6.17All versions (No fix recorded)
linux-hwe-6.2All versions (No fix recorded)
linux-hwe-6.8All versions (No fix recorded)
linux-hwe-7.0All versions (No fix recorded)
linux-hwe-edgeAll versions (No fix recorded)
linux-ibmAll versions (No fix recorded)
linux-ibm-5.15All versions (No fix recorded)
linux-ibm-5.4All versions (No fix recorded)
linux-ibm-6.8All versions (No fix recorded)
linux-intelAll versions (No fix recorded)
linux-intel-5.13All versions (No fix recorded)
linux-intel-iot-realtimeAll versions (No fix recorded)
linux-intel-iotgAll versions (No fix recorded)
linux-intel-iotg-5.15All versions (No fix recorded)
linux-iotAll versions (No fix recorded)
linux-kvmAll versions (No fix recorded)
linux-lowlatencyAll versions (No fix recorded)
linux-lowlatency-hwe-5.15All versions (No fix recorded)
linux-lowlatency-hwe-5.19All versions (No fix recorded)
linux-lowlatency-hwe-6.11All versions (No fix recorded)
linux-lowlatency-hwe-6.2All versions (No fix recorded)
linux-lowlatency-hwe-6.8All versions (No fix recorded)
linux-lts-xenialAll versions (No fix recorded)
linux-nvidiaAll versions (No fix recorded)
linux-nvidia-6.11All versions (No fix recorded)
linux-nvidia-6.17All versions (No fix recorded)
linux-nvidia-6.2All versions (No fix recorded)
linux-nvidia-6.5All versions (No fix recorded)
linux-nvidia-6.8All versions (No fix recorded)
linux-nvidia-7.0All versions (No fix recorded)
linux-nvidia-bosAll versions (No fix recorded)
linux-nvidia-lowlatencyAll versions (No fix recorded)
linux-nvidia-tegraAll versions (No fix recorded)
linux-nvidia-tegra-5.15All versions (No fix recorded)
linux-nvidia-tegra-igxAll versions (No fix recorded)
linux-oemAll versions (No fix recorded)
linux-oem-5.10All versions (No fix recorded)
linux-oem-5.13All versions (No fix recorded)
linux-oem-5.14All versions (No fix recorded)
linux-oem-5.17All versions (No fix recorded)
linux-oem-5.6All versions (No fix recorded)
linux-oem-6.0All versions (No fix recorded)
linux-oem-6.1All versions (No fix recorded)
linux-oem-6.11All versions (No fix recorded)
linux-oem-6.14All versions (No fix recorded)
linux-oem-6.17All versions (No fix recorded)
linux-oem-6.5All versions (No fix recorded)
linux-oem-6.8All versions (No fix recorded)
linux-oem-7.0All versions (No fix recorded)
linux-oracleAll versions (No fix recorded)
linux-oracle-5.0All versions (No fix recorded)
linux-oracle-5.11All versions (No fix recorded)
linux-oracle-5.13All versions (No fix recorded)
linux-oracle-5.15All versions (No fix recorded)
linux-oracle-5.3All versions (No fix recorded)
linux-oracle-5.4All versions (No fix recorded)
linux-oracle-5.8All versions (No fix recorded)
linux-oracle-6.14All versions (No fix recorded)
linux-oracle-6.17All versions (No fix recorded)
linux-oracle-6.5All versions (No fix recorded)
linux-oracle-6.8All versions (No fix recorded)
linux-oracle-7.0All versions (No fix recorded)
linux-raspiAll versions (No fix recorded)
linux-raspi-5.4All versions (No fix recorded)
linux-raspi-realtimeAll versions (No fix recorded)
linux-raspi2All versions (No fix recorded)
linux-realtimeAll versions (No fix recorded)
linux-realtime-6.14All versions (No fix recorded)

Show all 150

Chainguard49 products

linux-aws-6.12< 6.12.65-r0 | < 6.12.60-r4 | < 6.12.62-r1 | < 6.12.65-r1 | < 6.12.71-r0 | < 6.12.66-r0 | < 6.12.70-r0 | < 6.12.74-r0 | < 6.12.68-r1 | < 6.12.67-r0 | < 6.12.69-r0 | < 6.12.72-r1 | < 6.12.65-r2 | < 6.12.78-r0 | < 6.12.72-r0 | < 6.12.57-r1 | < 6.12.77-r1 | < 6.12.62-r0 | < 6.12.63-r0 | < 6.12.74-r1 | < 6.12.80-r0 | < 6.12.77-r2 | < 6.12.76-r0 | < 6.12.68-r0 | < 6.12.62-r2 | < 6.12.57-r2 | < 6.12.77-r0
linux-aws-6.18< 6.18.11-r0 | < 6.18.8-r0 | < 6.18.20-r0 | < 6.18.18-r2 | < 6.18.18-r0 | < 6.18.6-r0 | < 6.18.16-r0 | < 6.18.17-r0 | < 6.18.1-r1 | < 6.18.18-r1 | < 6.18.1-r0 | < 6.18.5-r1 | < 6.18.21-r0 | < 6.18.8-r1 | < 6.18.2-r0 | < 6.18.15-r0 | < 6.18.3-r0 | < 6.18.5-r0 | < 6.18.13-r0 | < 6.18.5-r2 | < 6.18.7-r0 | < 6.18.10-r0 | < 6.18.9-r0
linux-aws-generic< 6.18.5-r2 | < 6.18.9-r0 | < 6.17.10-r2 | All versions (No fix recorded) | < 6.18.10-r0 | < 6.18.5-r1 | < 6.18.2-r0 | < 6.17.7-r2 | < 6.18.6-r0 | < 6.18.5-r0 | < 6.18.3-r0 | < 6.18.7-r0 | < 6.18.8-r0 | < 6.17.10-r3 | < 6.18.1-r0 | < 6.18.1-r1 | < 6.17.8-r0
linux-azure-6.12< 6.12.77-r2 | < 6.12.65-r2 | < 6.12.70-r0 | < 6.12.65-r1 | < 6.12.62-r1 | < 6.12.62-r0 | < 6.12.71-r0 | < 6.12.60-r3 | < 6.12.72-r0 | < 6.12.65-r3 | < 6.12.57-r2 | < 6.12.57-r1 | < 6.12.74-r0 | < 6.12.62-r2 | < 6.12.65-r4 | < 6.12.68-r0 | < 6.12.77-r0 | < 6.12.63-r0 | < 6.12.67-r0 | < 6.12.78-r0 | < 6.12.57-r0 | < 6.12.60-r4 | < 6.12.69-r0 | < 6.12.80-r0 | < 6.12.77-r1 | < 6.12.74-r1 | < 6.12.66-r0 | < 6.12.76-r0
linux-azure-6.18< 6.18.18-r0 | < 6.18.7-r0 | < 6.18.8-r0 | < 6.18.5-r1 | < 6.18.21-r0 | < 6.18.5-r2 | < 6.18.8-r1 | < 6.18.6-r0 | < 6.18.5-r3 | < 6.18.18-r1 | < 6.18.15-r0 | < 6.18.11-r0 | < 6.18.17-r0 | < 6.18.18-r2 | < 6.18.10-r0 | < 6.18.9-r0 | < 6.18.13-r0 | < 6.18.20-r0 | < 6.18.16-r0

linux-azure-genericAll versions (No fix recorded) | < 6.18.6-r0 | < 6.18.8-r0 | < 6.18.5-r2 | < 6.17.7-r2 | < 6.18.1-r0 | < 6.18.2-r0 | < 6.18.10-r0 | < 6.17.8-r0 | < 6.18.1-r1 | < 6.18.5-r1 | < 6.18.5-r0 | < 6.17.10-r2 | < 6.18.3-r0 | < 6.18.7-r0 | < 6.18.9-r0 | < 6.17.10-r1
linux-desktop-6.18All versions (No fix recorded)
linux-desktop-6.18-bootcAll versions (No fix recorded)
linux-desktop-6.18-bootc-boot-installedAll versions (No fix recorded)
linux-desktop-6.18-headersAll versions (No fix recorded)
linux-desktop-6.18-modulesAll versions (No fix recorded)
linux-desktop-7.2All versions (No fix recorded)
linux-desktop-7.2-bootcAll versions (No fix recorded)
linux-desktop-7.2-bootc-boot-installedAll versions (No fix recorded)
linux-desktop-7.2-headersAll versions (No fix recorded)
linux-desktop-7.2-modulesAll versions (No fix recorded)
linux-firecracker-6.18All versions (No fix recorded)
linux-gcp-6.12< 6.12.72-r0 | < 6.12.70-r0 | < 6.12.65-r2 | < 6.12.57-r2 | < 6.12.60-r4 | < 6.12.62-r1 | < 6.12.78-r0 | < 6.12.68-r1 | < 6.12.77-r0 | < 6.12.66-r0 | < 6.12.67-r0 | < 6.12.62-r2 | < 6.12.57-r1 | < 6.12.68-r0 | < 6.12.65-r1 | < 6.12.77-r2 | < 6.12.71-r0 | < 6.12.57-r0 | < 6.12.62-r0 | < 6.12.60-r3 | < 6.12.77-r1 | < 6.12.74-r0 | < 6.12.76-r0 | < 6.12.74-r1 | < 6.12.69-r0 | < 6.12.80-r0 | < 6.12.63-r0 | < 6.12.65-r0
linux-gcp-6.18< 6.18.6-r0 | < 6.18.5-r1 | < 6.18.11-r0 | < 6.18.20-r0 | < 6.18.19-r1 | < 6.18.18-r0 | < 6.18.19-r0 | < 6.18.19-r2 | < 6.18.15-r0 | < 6.18.5-r0 | < 6.18.9-r0 | < 6.18.5-r2 | < 6.18.10-r0 | < 6.18.21-r0 | < 6.18.17-r0 | < 6.18.13-r0 | < 6.18.8-r0 | < 6.18.16-r0 | < 6.18.7-r0
linux-gcp-generic< 6.18.9-r0 | < 6.18.1-r0 | All versions (No fix recorded) | < 6.18.10-r0 | < 6.17.10-r3 | < 6.18.8-r0 | < 6.18.2-r0 | < 6.18.1-r1 | < 6.18.5-r1 | < 6.18.5-r0 | < 6.17.8-r0 | < 6.18.7-r0 | < 6.18.5-r2 | < 6.18.6-r0 | < 6.17.7-r2 | < 6.18.3-r0 | < 6.17.10-r2
linux-microvm-6.18All versions (No fix recorded)
linux-microvm-6.18-image-compressedAll versions (No fix recorded)
linux-microvm-6.18-image-uncompressedAll versions (No fix recorded)
linux-microvm-6.18-loadpin-testAll versions (No fix recorded)
linux-microvm-6.18-modulesAll versions (No fix recorded)
linux-microvm-7.3All versions (No fix recorded)
linux-microvm-7.3-image-compressedAll versions (No fix recorded)
linux-microvm-7.3-image-uncompressedAll versions (No fix recorded)
linux-qemu-6.12< 6.12.70-r0 | < 6.12.65-r2 | < 6.12.77-r1 | < 6.12.77-r0 | < 6.12.74-r1 | < 6.12.71-r0 | < 6.12.67-r0 | < 6.12.76-r0 | < 6.12.80-r0 | < 6.12.65-r1 | < 6.12.77-r2 | < 6.12.72-r0 | < 6.12.68-r0 | < 6.12.78-r0 | < 6.12.66-r0 | < 6.12.74-r0 | < 6.12.69-r0
linux-qemu-6.18< 6.18.10-r0 | < 6.18.5-r0 | < 6.18.18-r0 | < 6.18.15-r0 | < 6.18.18-r1 | < 6.18.11-r0 | < 6.18.13-r1 | < 6.18.5-r1 | < 6.18.18-r2 | < 6.18.5-r2 | < 6.18.6-r0 | < 6.18.9-r0 | < 6.18.13-r0 | < 6.18.8-r0 | < 6.18.21-r0 | < 6.18.17-r0 | < 6.18.7-r0 | < 6.18.16-r0 | < 6.18.20-r0
linux-qemu-6.18-bootc-boot-installed< 6.18.18-r1 | < 6.18.16-r0 | < 6.18.18-r2 | < 6.18.17-r0 | < 6.18.18-r0 | < 6.18.21-r0 | < 6.18.15-r0 | < 6.18.20-r0
linux-qemu-generic< 6.18.10-r0 | < 6.17.7-r1 | All versions (No fix recorded)
linux-qemu-generic-bootc-boot-installed< 6.18.10-r0
linux-qemu-melange< 6.18.16-r0
linux-qemu-rc< 6.19_rc2-r0 | < 6.19_rc1-r0 | < 6.19_rc6-r0 | < 6.19_rc5-r1 | < 6.18_rc5-r1 | < 6.18_rc5-r0 | < 6.19_rc5-r0 | < 6.19_rc1-r1 | < 7.0_rc5-r0 | < 7.0_rc1-r0 | < 7.0_rc5-r1 | < 6.19_rc5-r2 | < 6.18_rc6-r0 | < 6.19_rc4-r0 | < 7.0_rc3-r0 | < 6.19_rc8-r0 | < 6.18_rc7-r2 | < 6.19_rc1-r2 | < 6.19_rc3-r0 | < 6.18_rc7-r3 | < 6.19_rc7-r0
linux-raspberry-piAll versions (No fix recorded)
linux-raspberry-pi-4All versions (No fix recorded)
linux-raspberry-pi-4-boot-configurationAll versions (No fix recorded)
linux-raspberry-pi-4-bootcAll versions (No fix recorded)
linux-raspberry-pi-boot-configurationAll versions (No fix recorded)
linux-raspberry-pi-bootcAll versions (No fix recorded)
linux-server-7.2All versions (No fix recorded)
linux-server-7.2-bootcAll versions (No fix recorded)
linux-server-7.2-bootc-boot-installedAll versions (No fix recorded)
linux-server-7.2-headersAll versions (No fix recorded)
linux-server-7.2-modulesAll versions (No fix recorded)
linux-vmware-6.12< 6.12.77-r1 | < 6.12.74-r0 | < 6.12.66-r0 | < 6.12.67-r0 | < 6.12.68-r1 | < 6.12.65-r1 | < 6.12.69-r0 | < 6.12.80-r0 | < 6.12.70-r0 | < 6.12.76-r0 | < 6.12.77-r2 | < 6.12.72-r0 | < 6.12.65-r2 | < 6.12.78-r0 | < 6.12.71-r0 | < 6.12.77-r0 | < 6.12.74-r1 | < 6.12.68-r0
linux-vmware-6.18< 6.18.5-r2 | < 6.18.19-r2 | < 6.18.21-r0 | < 6.18.16-r0 | < 6.18.8-r0 | < 6.18.19-r0 | < 6.18.5-r1 | < 6.18.17-r0 | < 6.18.10-r0 | < 6.18.18-r0 | < 6.18.20-r0 | < 6.18.7-r0 | < 6.18.13-r0 | < 6.18.5-r0 | < 6.18.15-r0 | < 6.18.11-r0 | < 6.18.6-r0 | < 6.18.9-r0 | < 6.18.19-r1
linux-vmware-generic< 6.17.10-r3 | < 6.17.8-r0 | < 6.18.2-r0 | < 6.17.10-r2 | All versions (No fix recorded) | < 6.18.8-r0 | < 6.18.5-r2 | < 6.18.5-r0 | < 6.18.3-r0 | < 6.17.7-r2 | < 6.18.1-r0 | < 6.18.7-r0 | < 6.18.6-r0 | < 6.18.1-r1 | < 6.17.7-r1 | < 6.18.5-r1 | < 6.18.9-r0 | < 6.18.10-r0

Show all 49

Debian1 product

linuxAll versions (No fix recorded)

3 vendors · 200 products · Showing 200 of 220

References

15 links

access.redhat.com/errata/RHSA-2024:1881Vendor AdvisoryX Refsource REDHATAdvisory
access.redhat.com/errata/RHSA-2024:1882Vendor AdvisoryX Refsource REDHATAdvisory
access.redhat.com/errata/RHSA-2024:2758Vendor AdvisoryX Refsource REDHATAdvisory
access.redhat.com/errata/RHSA-2024:3414Vendor AdvisoryX Refsource REDHATAdvisory
access.redhat.com/errata/RHSA-2024:3421Vendor AdvisoryX Refsource REDHATAdvisory
access.redhat.com/errata/RHSA-2024:3618Vendor AdvisoryX Refsource REDHATAdvisory
access.redhat.com/errata/RHSA-2024:3627Vendor AdvisoryX Refsource REDHATAdvisory
access.redhat.com/security/cve/CVE-2023-6240VDB EntryX Refsource REDHATREPORTAdvisoryThird Party Advisory
bugzilla.redhat.com/show_bug.cgi?id=2250843Issue TrackingX Refsource REDHATREPORT
people.redhat.com/~hkario/marvin/REPORTAdvisoryThird Party Advisory

Show all 15 references

securitypitfalls.wordpress.com/2023/10/16/experiment-with-side-channel-attacks-yourself/REPORTARTICLETechnical Description
security.netapp.com/advisory/ntap-20240628-0002/X TransferredAdvisory
ubuntu.com/security/CVE-2023-6240REPORT
www.cve.org/CVERecord?id=CVE-2023-6240REPORT
security-tracker.debian.org/tracker/CVE-2023-6240Advisory