medium 5.5

CVE-2023-1637 json

A flaw that boot CPU could be vulnerable for the speculative execution behavior kind of attacks in the Linux kernel X86 CPU Power managemen…

published 2023-03-27 3 y ago modified 2026-06-17 4 mo ago also EUVD-2023-23866

cvss: 5.5; version 3.1, CNA
cisa kev: Not listed; not in CISA's catalog
epss: 0.2%; EPSS 0.2% chance of exploitation in 30 days, percentile 12%
public exploits: 0; none known

A flaw that boot CPU could be vulnerable for the speculative execution behavior kind of attacks in the Linux kernel X86 CPU Power management options functionality was found in the way user resuming CPU from suspend-to-RAM. A local user could use this flaw to potentially get unauthorized access to some memory of the CPU similar to the speculative execution behavior kind of attacks.

Patch / fix

distros 6 links 1

debian ubuntu red hat suse almalinux rocky linux

linux Debian 14, Debian 13, Debian 12 5.17.3-1

debian advisories DEBIAN-CVE-2023-1637

linux Ubuntu 20.04 LTS 5.4.0-117.132
linux Ubuntu 22.04 LTS 5.15.0-37.39
linux-aws Ubuntu 20.04 LTS 5.4.0-1078.84
linux-aws Ubuntu 22.04 LTS 5.15.0-1011.14
linux-gcp Ubuntu 20.04 LTS 5.4.0-1078.84
linux-gcp Ubuntu 22.04 LTS 5.15.0-1008.12
linux-gke Ubuntu 20.04 LTS 5.4.0-1074.79
linux-gke Ubuntu 22.04 LTS 5.15.0-1008.10

ubuntu advisories UBUNTU-CVE-2023-1637

Ubuntu security data © Canonical Ltd., from https://github.com/canonical/ubuntu-security-notices via OSV; changed: normalised to fixed package versions per release. CC BY-SA 4.0

kernel RHEL 9 5.14.0-284.30.1.el9_2
perf RHEL 9 5.14.0-284.30.1.el9_2
rtla RHEL 9 5.14.0-284.30.1.el9_2
bpftool RHEL 9 7.0.0-284.30.1.el9_2
kernel-64k RHEL 9 5.14.0-284.30.1.el9_2
kernel-core RHEL 9 5.14.0-284.30.1.el9_2
kernel-tools RHEL 9 5.14.0-284.30.1.el9_2
python3-perf RHEL 9 5.14.0-284.30.1.el9_2

red hat advisories RHSA-2023:5069 RHSA-2023:5091 RHSA-2023:5244 RHSA-2023:4789 RHSA-2023:5794 RHSA-2023:5628

kernel-syms SLES 12 SP2-BCL 4.4.121-92.208.1
kernel-source SLES 12 SP2-BCL 4.4.121-92.208.1
kernel-default SLES 12 SP2-BCL 4.4.121-92.208.1
dtb-aarch64 openSUSE Leap 15.5 5.14.21-150500.55.7.1
kernel-64kb SLE Module for Basesystem 15 SP5, openSUSE Leap 15.5 5.14.21-150500.55.7.1
kernel-syms SLE Module for Development Tools 15 SP5, openSUSE Leap 15.5 5.14.21-150500.55.7.1
kernel-obs-qa openSUSE Leap 15.5 5.14.21-150500.55.7.1
kernel-source SLE Module for Development Tools 15 SP5, SLE Module for Basesystem 15 SP5, openSUSE Leap 15.5 5.14.21-150500.55.7.1

suse advisories SUSE-SU-2023:3324-1 SUSE-SU-2023:2871-1 SUSE-SU-2023:2830-1 SUSE-SU-2023:2822-1 SUSE-SU-2023:2809-1 SUSE-SU-2023:2808-1

kernel AlmaLinux 9 5.14.0-284.30.1.el9_2
perf AlmaLinux 9 5.14.0-284.30.1.el9_2
rtla AlmaLinux 9 5.14.0-284.30.1.el9_2
bpftool AlmaLinux 9 7.0.0-284.30.1.el9_2
kernel-64k AlmaLinux 9 5.14.0-284.30.1.el9_2
kernel-core AlmaLinux 9 5.14.0-284.30.1.el9_2
kernel-tools AlmaLinux 9 5.14.0-284.30.1.el9_2
python3-perf AlmaLinux 9 5.14.0-284.30.1.el9_2

almalinux advisories ALSA-2023:5069 ALSA-2023:5091

kernel-rt Rocky Linux 9 5.14.0-284.30.1.rt14.315.el9_2

rocky linux advisories RLSA-2023:5091

git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=e2a… commit

Vendor advisories

What the vendors themselves say about their products: affected, fixed or not affected, and what to do.

red hat product security vex CVE-2023-1637 updated 2026-11-05 cvss 5.5

kernel: save/restore speculative MSRs during S3 suspend/resume

Red Hat Enterprise Linux 7 perf, kernel, bpftool, kernel-rt, python-perf, kernel-kdump, +8 more
affected: no fix planned “Out of support scope”
Red Hat CodeReady Linux Builder EUS (v.8.6) kernel-debuginfo-common-x86_64 4.18.0-372.70.1.el8_6, kernel-debuginfo-common-aarch64 4.18.0-372.70.1.el8_6, kernel-debuginfo-common-ppc64le 4.18.0-372.70.1.el8_6
fixed: vendor fix RHSA-2023:4789
Red Hat Enterprise Linux AppStream (v. 9) perf 5.14.0-284.30.1.el9_2, rtla 5.14.0-284.30.1.el9_2, kernel-devel-matched 5.14.0-284.30.1.el9_2, kernel-64k-devel-matched 5.14.0-284.30.1.el9_2, kernel-debug-devel-matched 5.14.0-284.30.1.el9_2, kernel-debuginfo-common-s390x 5.14.0-284.30.1.el9_2, +5 more
fixed: vendor fix RHSA-2023:5069
Red Hat Enterprise Linux BaseOS (v. 8) perf 4.18.0-477.27.1.el8_8, kernel 4.18.0-477.27.1.el8_8, bpftool 4.18.0-477.27.1.el8_8, kernel-core 4.18.0-477.27.1.el8_8, kernel-tools 4.18.0-477.27.1.el8_8, python3-perf 4.18.0-477.27.1.el8_8, +15 more
fixed: vendor fix RHSA-2023:5244
Red Hat Enterprise Linux BaseOS (v. 9) bpftool 7.0.0-284.30.1.el9_2, kernel 5.14.0-284.30.1.el9_2, kernel-64k 5.14.0-284.30.1.el9_2, kernel-core 5.14.0-284.30.1.el9_2, kernel-tools 5.14.0-284.30.1.el9_2, python3-perf 5.14.0-284.30.1.el9_2, +28 more
fixed: vendor fix RHSA-2023:5069
Red Hat Enterprise Linux BaseOS AUS (v.8.4) perf 4.18.0-305.108.1.el8_4, kernel 4.18.0-305.108.1.el8_4, bpftool 4.18.0-305.108.1.el8_4, kernel-core 4.18.0-305.108.1.el8_4, kernel-tools 4.18.0-305.108.1.el8_4, python3-perf 4.18.0-305.108.1.el8_4, +8 more Red Hat Enterprise Linux BaseOS E4S (v.8.4) perf 4.18.0-305.108.1.el8_4, kernel 4.18.0-305.108.1.el8_4, bpftool 4.18.0-305.108.1.el8_4, kernel-core 4.18.0-305.108.1.el8_4, kernel-tools 4.18.0-305.108.1.el8_4, python3-perf 4.18.0-305.108.1.el8_4, +15 more
fixed: vendor fix RHSA-2023:5628
Red Hat Enterprise Linux BaseOS EUS (v.8.6) perf 4.18.0-372.70.1.el8_6, kernel 4.18.0-372.70.1.el8_6, bpftool 4.18.0-372.70.1.el8_6, kernel-core 4.18.0-372.70.1.el8_6, kernel-tools 4.18.0-372.70.1.el8_6, python3-perf 4.18.0-372.70.1.el8_6, +15 more
fixed: vendor fix RHSA-2023:4789
Red Hat Enterprise Linux BaseOS TUS (v.8.4) perf 4.18.0-305.108.1.el8_4, kernel 4.18.0-305.108.1.el8_4, bpftool 4.18.0-305.108.1.el8_4, kernel-core 4.18.0-305.108.1.el8_4, kernel-tools 4.18.0-305.108.1.el8_4, python3-perf 4.18.0-305.108.1.el8_4, +8 more
fixed: vendor fix RHSA-2023:5628

show 10 more

Red Hat Enterprise Linux CRB (v. 8) kernel-debuginfo-common-x86_64 4.18.0-477.27.1.el8_8, kernel-debuginfo-common-aarch64 4.18.0-477.27.1.el8_8, kernel-debuginfo-common-ppc64le 4.18.0-477.27.1.el8_8
fixed: vendor fix RHSA-2023:5244
Red Hat Enterprise Linux CRB (v. 9) kernel-debuginfo-common-s390x 5.14.0-284.30.1.el9_2, kernel-debuginfo-common-x86_64 5.14.0-284.30.1.el9_2, kernel-debuginfo-common-aarch64 5.14.0-284.30.1.el9_2, kernel-debuginfo-common-ppc64le 5.14.0-284.30.1.el9_2
fixed: vendor fix RHSA-2023:5069
Red Hat Enterprise Linux NFV (v. 8) kernel-rt 4.18.0-477.27.1.rt7.290.el8_8, kernel-rt-kvm 4.18.0-477.27.1.rt7.290.el8_8, kernel-rt-core 4.18.0-477.27.1.rt7.290.el8_8, kernel-rt-modules 4.18.0-477.27.1.rt7.290.el8_8, kernel-rt-debug-kvm 4.18.0-477.27.1.rt7.290.el8_8, kernel-rt-debug-core 4.18.0-477.27.1.rt7.290.el8_8, +4 more
fixed: vendor fix RHSA-2023:5255
Red Hat Enterprise Linux NFV (v. 9) kernel-rt 5.14.0-284.30.1.rt14.315.el9_2, kernel-rt-kvm 5.14.0-284.30.1.rt14.315.el9_2, kernel-rt-core 5.14.0-284.30.1.rt14.315.el9_2, kernel-rt-modules 5.14.0-284.30.1.rt14.315.el9_2, kernel-rt-debug-kvm 5.14.0-284.30.1.rt14.315.el9_2, kernel-rt-debug-core 5.14.0-284.30.1.rt14.315.el9_2, +6 more
fixed: vendor fix RHSA-2023:5091
Red Hat Enterprise Linux NFV TUS (v.8.4) kernel-rt 4.18.0-305.108.1.rt7.183.el8_4, kernel-rt-kvm 4.18.0-305.108.1.rt7.183.el8_4, kernel-rt-core 4.18.0-305.108.1.rt7.183.el8_4, kernel-rt-modules 4.18.0-305.108.1.rt7.183.el8_4, kernel-rt-debug-kvm 4.18.0-305.108.1.rt7.183.el8_4, kernel-rt-debug-core 4.18.0-305.108.1.rt7.183.el8_4, +4 more
fixed: vendor fix RHSA-2023:5794
Red Hat Enterprise Linux RT (v. 8) kernel-rt 4.18.0-477.27.1.rt7.290.el8_8, kernel-rt-core 4.18.0-477.27.1.rt7.290.el8_8, kernel-rt-modules 4.18.0-477.27.1.rt7.290.el8_8, kernel-rt-debug-core 4.18.0-477.27.1.rt7.290.el8_8, kernel-rt-debug-modules 4.18.0-477.27.1.rt7.290.el8_8, kernel-rt-modules-extra 4.18.0-477.27.1.rt7.290.el8_8, +2 more
fixed: vendor fix RHSA-2023:5255
Red Hat Enterprise Linux RT (v. 9) kernel-rt 5.14.0-284.30.1.rt14.315.el9_2, kernel-rt-core 5.14.0-284.30.1.rt14.315.el9_2, kernel-rt-modules 5.14.0-284.30.1.rt14.315.el9_2, kernel-rt-debug-core 5.14.0-284.30.1.rt14.315.el9_2, kernel-rt-modules-core 5.14.0-284.30.1.rt14.315.el9_2, kernel-rt-debug-modules 5.14.0-284.30.1.rt14.315.el9_2, +4 more
fixed: vendor fix RHSA-2023:5091
Red Hat Enterprise Linux RT TUS (v.8.4) kernel-rt 4.18.0-305.108.1.rt7.183.el8_4, kernel-rt-core 4.18.0-305.108.1.rt7.183.el8_4, kernel-rt-modules 4.18.0-305.108.1.rt7.183.el8_4, kernel-rt-debug-core 4.18.0-305.108.1.rt7.183.el8_4, kernel-rt-debug-modules 4.18.0-305.108.1.rt7.183.el8_4, kernel-rt-modules-extra 4.18.0-305.108.1.rt7.183.el8_4, +2 more
fixed: vendor fix RHSA-2023:5794
Red Hat Virtualization 4 Hypervisor for RHEL 8 perf 4.18.0-372.70.1.el8_6, kernel-debuginfo-common-x86_64 4.18.0-372.70.1.el8_6
fixed: vendor fix RHSA-2023:4789
Red Hat Enterprise Linux 6 perf, kernel, python-perf, kernel-kdump, kernel-firmware, kernel-bootwrapper, +1 more Red Hat Enterprise Linux AppStream (v. 9) kernel-doc 5.14.0-284.30.1.el9_2
not affected: vulnerable code not present

Red Hat CSAF VEX © Red Hat, Inc., from https://security.access.redhat.com/data/csaf/v2/vex/; changed: reduced to product statuses and remediations. CC BY 4.0 · csaf

CISA SSVC

Exploitation: Proof of concept is public
Automatable: no
Technical impact: partial
Assessed: 20 mo ago (2025-02-19)

Exploit prediction

0.22% chance of exploitation in the next 30 days, higher than 12% of all scored CVEs (FIRST EPSS, 2026-11-08).

Exploits and checks

sourceware.org https://sourceware.org/bugzilla/show_bug.cgi?id=27398 referenced PoC, tagged "exploit" by a source, unverified

CVSS scores

assigned by	version	score	vector
CISA ADP	3.1	5.5	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
NVD	3.1	5.5	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CNA	3.1	5.5	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Affected products

n/a Kernel

Classification

Weakness

CWE-226 Sensitive Information in Resource Not Removed Before Reuse
CWE-212 Improper Removal of Sensitive Information Before Storage or Transfer

Technology feeds

Linux kernel rss critical rss

References

git.kernel.org /pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=e2a1256b17b16f9b9adf1b6fea56819e7b68e463
mailing-list, patch
sourceware.org /bugzilla/show_bug.cgi?id=27398
exploit, issue-tracking

Sources

CVE List CVE-2023-1637
NVD CVE-2023-1637

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.

Summary