Re: [PATCH] cve-exclusion: set status for CVE-2023-3640

[Paul Barker <paul@pbarker.dev>]

[-- Attachment #1: Type: text/plain, Size: 1142 bytes --]

On Thu, 2026-08-06 at 17:04 +0000, Venkata Navduri wrote:
> From: Navuduri Venkata Adhitya <Venkata.Navuduri@windriver.com>
> 
> The x86 cpu_entry_area KASLR bypass (CVE-2023-3640) was fixed in
> v6.2-rc1 by commit 97e3d26b5e5f ("x86/mm: Randomize per-cpu entry
> area") from Peter Zijlstra.
> 
> The fix is already present in all Yocto releases shipping kernel >=6.2.
> 
> Signed-off-by: Navuduri Venkata Adhitya <Venkata.Navuduri@windriver.com>

Hi,

Commit 97e3d26b5e5f371b3ee223d94dd123e6c442ba80 is the fix for
CVE-2023-0597 [1].

On NVD, the description of CVE-2023-3640 [2] includes:

  Based on the previous CVE-2023-0597, the 'Randomize per-cpu entry
  area' feature was implemented in /arch/x86/mm/cpu_entry_area.c, which
  works through the init_cea_offsets() function when KASLR is enabled.
  However, despite this feature, there is still a risk of per-cpu entry
  area leaks.

So this CVE appears to be about remaining issues after the fix in that
commit.

[1]: https://nvd.nist.gov/vuln/detail/cve-2023-0597
[2]: https://nvd.nist.gov/vuln/detail/cve-2023-3640

Best regards,

-- 
Paul Barker


[-- Attachment #2: This is a digitally signed message part --]
[-- Type: application/pgp-signature, Size: 252 bytes --]