CVE-2023-6240
Vulnerability Summary
Timeline
Description
A Marvin vulnerability side-channel leakage was found in the RSA decryption operation in the Linux Kernel. This issue may allow a network attacker to decrypt ciphertexts or forge signatures, limiting the services that use that private key.
CVSS Metrics
- v3.1•MEDIUM•Score: 6.5CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N
EPSS Trends
Current EPSS score: 0.97%• Percentile: 60%
Techniques & Countermeasures
- CWE-203•Observable Discrepancy
The product behaves differently or sends different responses under different circumstances in a way that is observable to an unauthorized actor.
Affected Systems
- chainguard•linux-aws-6.12
< 6.12.65-r0 | < 6.12.60-r4 | < 6.12.62-r1 | < 6.12.65-r1 | < 6.12.71-r0 | < 6.12.66-r0 | < 6.12.70-r0 | < 6.12.74-r0 | < 6.12.68-r1 | < 6.12.67-r0 | < 6.12.69-r0 | < 6.12.72-r1 | < 6.12.65-r2 | < 6.12.78-r0 | < 6.12.72-r0 | < 6.12.57-r1 | < 6.12.77-r1 | < 6.12.62-r0 | < 6.12.63-r0 | < 6.12.74-r1 | < 6.12.80-r0 | < 6.12.77-r2 | < 6.12.76-r0 | < 6.12.68-r0 | < 6.12.62-r2 | < 6.12.57-r2 | < 6.12.77-r0
- chainguard•linux-aws-6.18
< 6.18.11-r0 | < 6.18.8-r0 | < 6.18.20-r0 | < 6.18.18-r2 | < 6.18.18-r0 | < 6.18.6-r0 | < 6.18.16-r0 | < 6.18.17-r0 | < 6.18.1-r1 | < 6.18.18-r1 | < 6.18.1-r0 | < 6.18.5-r1 | < 6.18.21-r0 | < 6.18.8-r1 | < 6.18.2-r0 | < 6.18.15-r0 | < 6.18.3-r0 | < 6.18.5-r0 | < 6.18.13-r0 | < 6.18.5-r2 | < 6.18.7-r0 | < 6.18.10-r0 | < 6.18.9-r0
- chainguard•linux-aws-generic
< 6.18.5-r2 | < 6.18.9-r0 | < 6.17.10-r2 | all | < 6.18.10-r0 | < 6.18.5-r1 | < 6.18.2-r0 | < 6.17.7-r2 | < 6.18.6-r0 | < 6.18.5-r0 | < 6.18.3-r0 | < 6.18.7-r0 | < 6.18.8-r0 | < 6.17.10-r3 | < 6.18.1-r0 | < 6.18.1-r1 | < 6.17.8-r0
- chainguard•linux-azure-6.12
< 6.12.77-r2 | < 6.12.65-r2 | < 6.12.70-r0 | < 6.12.65-r1 | < 6.12.62-r1 | < 6.12.62-r0 | < 6.12.71-r0 | < 6.12.60-r3 | < 6.12.72-r0 | < 6.12.65-r3 | < 6.12.57-r2 | < 6.12.57-r1 | < 6.12.74-r0 | < 6.12.62-r2 | < 6.12.65-r4 | < 6.12.68-r0 | < 6.12.77-r0 | < 6.12.63-r0 | < 6.12.67-r0 | < 6.12.78-r0 | < 6.12.57-r0 | < 6.12.60-r4 | < 6.12.69-r0 | < 6.12.80-r0 | < 6.12.77-r1 | < 6.12.74-r1 | < 6.12.66-r0 | < 6.12.76-r0
- chainguard•linux-azure-6.18
< 6.18.18-r0 | < 6.18.7-r0 | < 6.18.8-r0 | < 6.18.5-r1 | < 6.18.21-r0 | < 6.18.5-r2 | < 6.18.8-r1 | < 6.18.6-r0 | < 6.18.5-r3 | < 6.18.18-r1 | < 6.18.15-r0 | < 6.18.11-r0 | < 6.18.17-r0 | < 6.18.18-r2 | < 6.18.10-r0 | < 6.18.9-r0 | < 6.18.13-r0 | < 6.18.20-r0 | < 6.18.16-r0
- chainguard•linux-azure-generic
all | < 6.18.6-r0 | < 6.18.8-r0 | < 6.18.5-r2 | < 6.17.7-r2 | < 6.18.1-r0 | < 6.18.2-r0 | < 6.18.10-r0 | < 6.17.8-r0 | < 6.18.1-r1 | < 6.18.5-r1 | < 6.18.5-r0 | < 6.17.10-r2 | < 6.18.3-r0 | < 6.18.7-r0 | < 6.18.9-r0 | < 6.17.10-r1
- chainguard•linux-desktop-6.18
all
- chainguard•linux-desktop-6.18-bootc
all
- chainguard•linux-desktop-6.18-bootc-boot-installed
all
- chainguard•linux-desktop-6.18-headers
all
- chainguard•linux-desktop-6.18-modules
all
- chainguard•linux-desktop-7.2
all
- chainguard•linux-desktop-7.2-bootc
all
- chainguard•linux-desktop-7.2-headers
all
- chainguard•linux-desktop-7.2-modules
all
- chainguard•linux-firecracker-6.18
all
- chainguard•linux-gcp-6.12
< 6.12.72-r0 | < 6.12.70-r0 | < 6.12.65-r2 | < 6.12.57-r2 | < 6.12.60-r4 | < 6.12.62-r1 | < 6.12.78-r0 | < 6.12.68-r1 | < 6.12.77-r0 | < 6.12.66-r0 | < 6.12.67-r0 | < 6.12.62-r2 | < 6.12.57-r1 | < 6.12.68-r0 | < 6.12.65-r1 | < 6.12.77-r2 | < 6.12.71-r0 | < 6.12.57-r0 | < 6.12.62-r0 | < 6.12.60-r3 | < 6.12.77-r1 | < 6.12.74-r0 | < 6.12.76-r0 | < 6.12.74-r1 | < 6.12.69-r0 | < 6.12.80-r0 | < 6.12.63-r0 | < 6.12.65-r0
- chainguard•linux-gcp-6.18
< 6.18.6-r0 | < 6.18.5-r1 | < 6.18.11-r0 | < 6.18.20-r0 | < 6.18.19-r1 | < 6.18.18-r0 | < 6.18.19-r0 | < 6.18.19-r2 | < 6.18.15-r0 | < 6.18.5-r0 | < 6.18.9-r0 | < 6.18.5-r2 | < 6.18.10-r0 | < 6.18.21-r0 | < 6.18.17-r0 | < 6.18.13-r0 | < 6.18.8-r0 | < 6.18.16-r0 | < 6.18.7-r0
- chainguard•linux-gcp-generic
< 6.18.9-r0 | < 6.18.1-r0 | all | < 6.18.10-r0 | < 6.17.10-r3 | < 6.18.8-r0 | < 6.18.2-r0 | < 6.18.1-r1 | < 6.18.5-r1 | < 6.18.5-r0 | < 6.17.8-r0 | < 6.18.7-r0 | < 6.18.5-r2 | < 6.18.6-r0 | < 6.17.7-r2 | < 6.18.3-r0 | < 6.17.10-r2
- chainguard•linux-qemu-6.12
< 6.12.70-r0 | < 6.12.65-r2 | < 6.12.77-r1 | < 6.12.77-r0 | < 6.12.74-r1 | < 6.12.71-r0 | < 6.12.67-r0 | < 6.12.76-r0 | < 6.12.80-r0 | < 6.12.65-r1 | < 6.12.77-r2 | < 6.12.72-r0 | < 6.12.68-r0 | < 6.12.78-r0 | < 6.12.66-r0 | < 6.12.74-r0 | < 6.12.69-r0
- chainguard•linux-qemu-6.18
< 6.18.10-r0 | < 6.18.5-r0 | < 6.18.18-r0 | < 6.18.15-r0 | < 6.18.18-r1 | < 6.18.11-r0 | < 6.18.13-r1 | < 6.18.5-r1 | < 6.18.18-r2 | < 6.18.5-r2 | < 6.18.6-r0 | < 6.18.9-r0 | < 6.18.13-r0 | < 6.18.8-r0 | < 6.18.21-r0 | < 6.18.17-r0 | < 6.18.7-r0 | < 6.18.16-r0 | < 6.18.20-r0
- chainguard•linux-qemu-6.18-bootc-boot-installed
< 6.18.18-r1 | < 6.18.16-r0 | < 6.18.18-r2 | < 6.18.17-r0 | < 6.18.18-r0 | < 6.18.21-r0 | < 6.18.15-r0 | < 6.18.20-r0
- chainguard•linux-qemu-generic
< 6.18.10-r0 | < 6.17.7-r1 | < 0
- chainguard•linux-qemu-generic-bootc-boot-installed
< 6.18.10-r0
- chainguard•linux-qemu-melange
< 6.18.16-r0
- chainguard•linux-qemu-rc
< 6.19_rc2-r0 | < 6.19_rc1-r0 | < 6.19_rc6-r0 | < 6.19_rc5-r1 | < 6.18_rc5-r1 | < 6.18_rc5-r0 | < 6.19_rc5-r0 | < 6.19_rc1-r1 | < 7.0_rc5-r0 | < 7.0_rc1-r0 | < 7.0_rc5-r1 | < 6.19_rc5-r2 | < 6.18_rc6-r0 | < 6.19_rc4-r0 | < 7.0_rc3-r0 | < 6.19_rc8-r0 | < 6.18_rc7-r2 | < 6.19_rc1-r2 | < 6.19_rc3-r0 | < 6.18_rc7-r3 | < 6.19_rc7-r0
- chainguard•linux-raspberry-pi
all
- chainguard•linux-raspberry-pi-4
all
- chainguard•linux-raspberry-pi-4-boot-configuration
all
- chainguard•linux-raspberry-pi-4-bootc
all
- chainguard•linux-raspberry-pi-boot-configuration
all
- chainguard•linux-raspberry-pi-bootc
all
- chainguard•linux-vmware-6.12
< 6.12.77-r1 | < 6.12.74-r0 | < 6.12.66-r0 | < 6.12.67-r0 | < 6.12.68-r1 | < 6.12.65-r1 | < 6.12.69-r0 | < 6.12.80-r0 | < 6.12.70-r0 | < 6.12.76-r0 | < 6.12.77-r2 | < 6.12.72-r0 | < 6.12.65-r2 | < 6.12.78-r0 | < 6.12.71-r0 | < 6.12.77-r0 | < 6.12.74-r1 | < 6.12.68-r0
- chainguard•linux-vmware-6.18
< 6.18.5-r2 | < 6.18.19-r2 | < 6.18.21-r0 | < 6.18.16-r0 | < 6.18.8-r0 | < 6.18.19-r0 | < 6.18.5-r1 | < 6.18.17-r0 | < 6.18.10-r0 | < 6.18.18-r0 | < 6.18.20-r0 | < 6.18.7-r0 | < 6.18.13-r0 | < 6.18.5-r0 | < 6.18.15-r0 | < 6.18.11-r0 | < 6.18.6-r0 | < 6.18.9-r0 | < 6.18.19-r1
- chainguard•linux-vmware-generic
< 6.17.10-r3 | < 6.17.8-r0 | < 6.18.2-r0 | < 6.17.10-r2 | all | < 6.18.8-r0 | < 6.18.5-r2 | < 6.18.5-r0 | < 6.18.3-r0 | < 6.17.7-r2 | < 6.18.1-r0 | < 6.18.7-r0 | < 6.18.6-r0 | < 6.18.1-r1 | < 6.17.7-r1 | < 6.18.5-r1 | < 6.18.9-r0 | < 6.18.10-r0
- debian•linux
all | all | all | all
- ubuntu•linux
all | all | all | all | all
- ubuntu•linux-allwinner-5.19
all
- ubuntu•linux-aws
all | all | all | all | all
- ubuntu•linux-aws-5.0
all
- ubuntu•linux-aws-5.11
all
- ubuntu•linux-aws-5.13
all
- ubuntu•linux-aws-5.15
all
- ubuntu•linux-aws-5.19
all
- ubuntu•linux-aws-5.3
all
- ubuntu•linux-aws-5.4
all
- ubuntu•linux-aws-5.8
all
- ubuntu•linux-aws-6.14
all
- ubuntu•linux-aws-6.17
all
- ubuntu•linux-aws-6.2
all
Showing first 50 affected entries in server-rendered view.
References (15)
- https://access.redhat.com/errata/RHSA-2024:1881
- https://access.redhat.com/errata/RHSA-2024:1882
- https://access.redhat.com/errata/RHSA-2024:2758
- https://access.redhat.com/errata/RHSA-2024:3414
- https://access.redhat.com/errata/RHSA-2024:3421
- https://access.redhat.com/errata/RHSA-2024:3618
- https://access.redhat.com/errata/RHSA-2024:3627
- https://access.redhat.com/security/cve/CVE-2023-6240
- https://bugzilla.redhat.com/show_bug.cgi?id=2250843
- https://people.redhat.com/~hkario/marvin/
- https://securitypitfalls.wordpress.com/2023/10/16/experiment-with-side-channel-attacks-yourself/
- https://security.netapp.com/advisory/ntap-20240628-0002/
- https://ubuntu.com/security/CVE-2023-6240
- https://www.cve.org/CVERecord?id=CVE-2023-6240
- https://security-tracker.debian.org/tracker/CVE-2023-6240