CVE-2023-6240

Medium

Description

A Marvin vulnerability side-channel leakage was found in the RSA decryption operation in the Linux Kernel. This issue may allow a network attacker to decrypt ciphertexts or forge signatures, limiting the services that use that private key.

SeverityMedium
CVSS6.5
Exploit probability62. percentile1%
ProductLinux Kernel
PublishedFeb 4, 2024
First seenFeb 4, 2024
Weakness typeCWE-203CWE-203

How to fix

Affected products

ProductAffected versionsFixed in
linux linux_kernelNo range specified—
redhat enterprise_linux7.0, 8.0, 9.0—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.