Red Hat RHEL 9 Security Advisory: CVE-2023-6240 (Marvin Side-Channel) and AMD #VC Exception Vulnerabilities

From this webpage screenshot, the following key vulnerability information can be obtained: 1. Vulnerability IDs: - CVE-2023-6240 - CVE-2024-25742 - CVE-2024-25743 2. Vulnerability Types: - kernel: Marvin vulnerability side-channel leakage in the RSA decryption operation (CVE-2023-6240) - amd: Instruction raise #VC exception at exit (AMD-SN-3008, CVE-2024-25742, CVE-2024-25743) 3. Affected Products: - Red Hat Enterprise Linux for x86_64 9 x86_64 - Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.4 x86_64 - Red Hat Enterprise Linux Server - AUS 9.4 x86_64 - Red Hat Enterprise Linux for IBM z Systems 9 s390x - Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.4 s390x - Red Hat Enterprise Linux for Power, little endian 9 ppc64le - Red Hat Enterprise Linux for Real Time 9 x86_64 - Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.4 ppc64le - Red Hat Enterprise Linux for Real Time for NFV 9 x86_64 - Red Hat Enterprise Linux for ARM 64 9 aarch64 - Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.4 aarch64 - Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.4 ppc64le - Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.4 x86_64 - Red Hat CodeReady Linux Builder for x86_64 9 x86_64 - Red Hat CodeReady Linux Builder for Power, little endian 9 ppc64le - Red Hat CodeReady Linux Builder for ARM 64 9 aarch64 - Red Hat CodeReady Linux Builder for IBM z Systems 9 s390x - Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support 9.4 x86_64 - Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support 9.4 ppc64le - Red Hat CodeReady Linux Builder for IBM z Systems - Extended Update Support 9.4 s390x - Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support 9.4 aarch64 - Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.4 aarch64 - Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.4 s390x - Red Hat Enterprise Linux for Real Time for x86_64 - 4 years of updates 9.4 x86_64 - Red Hat Enterprise Linux for Real Time for NFV for x86_64 - 4 years of updates 9.4 x86_64 4. Remediation Actions: - BZ - 2250843 - CVE-2023-6240 kernel: Marvin vulnerability side-channel leakage in the RSA decryption operation - BZ - 2270836 - CVE-2024-25742 CVE-2024-25743 hw: amd: Instruction raise #VC exception at exit 5. Contact Information: - Red Hat security contact: secalert@redhat.com - More contact details: https://access.redhat.com/security/team/contact/ This information helps users understand the details of the vulnerabilities, the scope of affected products, and how to contact Red Hat for further assistance.

Goal Reached Thanks to every supporter — we hit 100%!

Red Hat RHEL 9 Security Advisory: CVE-2023-6240 (Marvin Side-Channel) and AMD #VC Exception Vulnerabilities

More from this source