Database/Kernel, userspace & hypervisor
Linux kernel (KASLR): EntryBleed: prefetch side channel defeats KASLR even with KPTI
CVSS 5.5CVE-2022-4543Kernel, userspace & hypervisorcurated
Impact
EntryBleed: prefetch side channel defeats KASLR even with KPTI - enabling primitive for every other kernel exploit
Who can reach it
Any tenant process in a container
What to do
Kernel patch, drain + reboot. Not independently exploitable, but it removes the main mitigation everything else relies on - treat as a severity multiplier on the whole kernel-privesc set
References
Related entries
- Linux kernel amdkfd (KFD compute driver, /dev/kfd) (drm/amdkfd): A NULL pointer dereference in the amdkfd (KFD computeCVE-2022-49055 · Linux kernel amdkfd (KFD compute driver, /dev/kfd) (drm/amdkfd)Medium
- Linux kernel amdkfd (KFD compute driver, /dev/kfd) (drm/amdkfd): A race condition or locking defect in the amdkfd (KFDCVE-2022-49133 · Linux kernel amdkfd (KFD compute driver, /dev/kfd) (drm/amdkfd)Medium
- Linux kernel (drivers/vfio/pci): Whoever holds the VFIO device fd for a passed-through PCI function can make the hostCVE-2022-49219 · Linux kernel (drivers/vfio/pci)Medium
- Linux kernel (arch/x86/kvm/vmx): Between the point where KVM loads the guest's SPEC_CTRL value and the actual VM entryCVE-2022-49610 · Linux kernel (arch/x86/kvm/vmx)Medium
- Linux kernel (drivers/gpu/drm/scheduler): When a process is killed with GPU work still queued, the scheduler entityCVE-2022-49829 · Linux kernel (drivers/gpu/drm/scheduler)Medium
- Linux kernel amdkfd (KFD compute driver, /dev/kfd) (drm/amdkfd): A NULL pointer dereference in the amdkfd (KFD computeCVE-2022-49864 · Linux kernel amdkfd (KFD compute driver, /dev/kfd) (drm/amdkfd)Medium
This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.