CVE-2023-6240

Advisory lineage Upstream: 0 Downstream: 9
Modified
Published: 04 Feb 2024, 14:11
Last modified:08 Nov 2025, 07:10

Vulnerability Summary

Overall Risk (default)
medium
26/100
CVSS Score
6.5 MEDIUM
v3.1 (cve.org)
EPSS Score
0.08% LOW
0% probability 0.00%
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

04 Feb 2024, 14:11
Published
Vulnerability first disclosed
08 Nov 2025, 07:10
Last Modified
Vulnerability information updated

Description

A Marvin vulnerability side-channel leakage was found in the RSA decryption operation in the Linux Kernel. This issue may allow a network attacker to decrypt ciphertexts or forge signatures, limiting the services that use that private key.

CVSS Metrics

  • v3.1•MEDIUM•Score: 6.5CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N

EPSS Trends

Current EPSS score: 0.08%• Percentile: 23%

Techniques & Countermeasures

  • CWE-203•Observable Discrepancy

    The product behaves differently or sends different responses under different circumstances in a way that is observable to an unauthorized actor.

Affected Systems

  • linux•linux_kernel

    na

  • redhat•enterprise_linux

    7.0 | 8.0 | 9.0

References (12)