CVE-2022-4543: Infoleak
Published Jan 11, 2023
·Updated
A flaw named "EntryBleed" was found in the Linux Kernel Page Table Isolation (KPTI). This issue could allow a local attacker to leak KASLR base via prefetch side-channels based on TLB timing for Intel systems.
Affected Software
8 affected componentsFixes available
Linux Linux kernel
Microsoft azl3 kernel 6.6.96.2-2
Microsoft azl3 kernel 6.6.96.2-1
Microsoft cbl2 kernel 5.15.182.1-1<5.15.182.1-1
5.15.182.1-1
Microsoft cm1 kernel 5.10.189.1-1<5.10.189.1-1
5.10.189.1-1
Microsoft azl3 kernel 6.6.104.2-4
Microsoft azl3 kernel 6.6.112.1-2
Microsoft azl3 kernel 6.6.117.1-1
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 5.10.189.1-1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 5.15.182.1-1
Event History
Jan 11, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
DescriptionWeakness
Sep 3, 2025
Data Sourced
via Microsoft·08:19 PM
DescriptionSeverityWeaknessAffected Software
Updated
via Microsoft·08:19 PM
Affected Software
Updated
via Microsoft·08:19 PM
SeverityAffected Software
Sep 4, 2025
Updated
via Microsoft·03:19 AM
DescriptionSeverity
Updated
via Microsoft·03:19 AM
Affected Software