Is CVE-2023-3640 in the CISA KEV catalog?

No. CVE-2023-3640 is not currently on the CISA Known Exploited Vulnerabilities list.

What is the CVSS severity of CVE-2023-3640?

CVE-2023-3640 has a CVSS v3 base score of 7.0 (HIGH).

What is the EPSS score for CVE-2023-3640?

CVE-2023-3640 has an EPSS score of 0.76% (51th percentile), estimating the probability of exploitation in the next 30 days.

How do I fix CVE-2023-3640?

Upgrade bpftool on rhel 9 to 0:7.2.0-362.8.1.el9_3 or later. Fixes are available for 156 affected products.

CVE & CISA-KEV Catalog

CVE-2023-3640

HIGH

7.0

CVSS v3

NVD

Description

A possible unauthorized memory access flaw was found in the Linux kernel's cpu_entry_area mapping of X86 CPU data to memory, where a user may guess the location of exception stacks or other important data. Based on the previous CVE-2023-0597, the 'Randomize per-cpu entry area' feature was implemented in /arch/x86/mm/cpu_entry_area.c, which works through the init_cea_offsets() function when KASLR is enabled. However, despite this feature, there is still a risk of per-cpu entry area leaks. This issue could allow a local user to gain access to some important data with memory in an expected location and potentially escalate their privileges on the system.

CWE-385 CWE-203

How to fix

Remediation Available

bpftoolRed Hat / RHEL

Fixed in:0:7.2.0-362.8.1.el9_3RHSA-2023:6583

bpftoolRocky

Fixed in:0:7.2.0-362.8.1.el9_3RHSA-2023:6583

bpftool-debuginfoRed Hat / RHEL

Fixed in:0:7.2.0-362.8.1.el9_3RHSA-2023:6583

bpftool-debuginfoRocky

Fixed in:0:7.2.0-362.8.1.el9_3RHSA-2023:6583

kernelRed Hat / RHEL

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernelRocky

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-64kRocky

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-64kRed Hat / RHEL

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-64k-coreRocky

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-64k-coreRed Hat / RHEL

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-64k-debugRocky

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-64k-debugRed Hat / RHEL

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-64k-debug-coreRocky

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-64k-debug-coreRed Hat / RHEL

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-64k-debug-debuginfoRed Hat / RHEL

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-64k-debug-debuginfoRocky

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-64k-debug-develRed Hat / RHEL

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-64k-debug-develRocky

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-64k-debug-devel-matchedRocky

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-64k-debug-devel-matchedRed Hat / RHEL

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-64k-debug-modulesRed Hat / RHEL

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-64k-debug-modulesRocky

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-64k-debug-modules-coreRed Hat / RHEL

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-64k-debug-modules-coreRocky

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-64k-debug-modules-extraRed Hat / RHEL

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-64k-debug-modules-extraRocky

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-64k-debuginfoRed Hat / RHEL

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-64k-debuginfoRocky

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-64k-develRocky

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-64k-develRed Hat / RHEL

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-64k-devel-matchedRocky

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-64k-devel-matchedRed Hat / RHEL

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-64k-modulesRocky

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-64k-modulesRed Hat / RHEL

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-64k-modules-coreRocky

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-64k-modules-coreRed Hat / RHEL

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-64k-modules-extraRed Hat / RHEL

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-64k-modules-extraRocky

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-abi-stablelistsRed Hat / RHEL

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-abi-stablelistsRocky

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-coreRed Hat / RHEL

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-coreRocky

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-debugRed Hat / RHEL

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-debugRocky

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-debug-coreRed Hat / RHEL

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-debug-coreRocky

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-debug-debuginfoRed Hat / RHEL

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-debug-debuginfoRocky

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-debug-develRed Hat / RHEL

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-debug-develRocky

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-debug-devel-matchedRocky

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-debug-devel-matchedRed Hat / RHEL

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-debug-modulesRocky

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-debug-modulesRed Hat / RHEL

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-debug-modules-coreRocky

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-debug-modules-coreRed Hat / RHEL

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-debug-modules-extraRed Hat / RHEL

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-debug-modules-extraRocky

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-debug-uki-virtRocky

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-debug-uki-virtRed Hat / RHEL

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-debuginfoRed Hat / RHEL

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-debuginfoRocky

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-debuginfo-common-aarch64Rocky

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-debuginfo-common-aarch64Red Hat / RHEL

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-debuginfo-common-ppc64leRed Hat / RHEL

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-debuginfo-common-ppc64leRocky

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-debuginfo-common-s390xRed Hat / RHEL

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-debuginfo-common-s390xRocky

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-debuginfo-common-x86_64Rocky

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-debuginfo-common-x86_64Red Hat / RHEL

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-develRocky

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-develRed Hat / RHEL

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-devel-matchedRocky

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-devel-matchedRed Hat / RHEL

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-docRed Hat / RHEL

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-docRocky

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-modulesRocky

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-modulesRed Hat / RHEL

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-modules-coreRocky

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-modules-coreRed Hat / RHEL

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-modules-extraRed Hat / RHEL

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-modules-extraRocky

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-rtRed Hat / RHEL

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-rtRocky

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-rt-coreRed Hat / RHEL

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-rt-coreRocky

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-rt-debugRocky

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-rt-debugRed Hat / RHEL

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-rt-debug-coreRed Hat / RHEL

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-rt-debug-coreRocky

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-rt-debug-debuginfoRocky

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-rt-debug-debuginfoRed Hat / RHEL

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-rt-debug-develRocky

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-rt-debug-develRed Hat / RHEL

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-rt-debug-kvmRed Hat / RHEL

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-rt-debug-kvmRocky

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-rt-debug-modulesRed Hat / RHEL

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-rt-debug-modulesRocky

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-rt-debug-modules-coreRocky

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-rt-debug-modules-coreRed Hat / RHEL

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-rt-debug-modules-extraRocky

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-rt-debug-modules-extraRed Hat / RHEL

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-rt-debuginfoRed Hat / RHEL

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-rt-debuginfoRocky

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-rt-develRed Hat / RHEL

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-rt-develRocky

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-rt-kvmRed Hat / RHEL

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-rt-kvmRocky

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-rt-modulesRed Hat / RHEL

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-rt-modulesRocky

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-rt-modules-coreRed Hat / RHEL

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-rt-modules-coreRocky

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-rt-modules-extraRed Hat / RHEL

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-rt-modules-extraRocky

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-toolsRocky

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-toolsRed Hat / RHEL

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-tools-debuginfoRocky

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-tools-debuginfoRed Hat / RHEL

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-tools-libsRed Hat / RHEL

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-tools-libsRocky

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-tools-libs-develRocky

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-tools-libs-develRed Hat / RHEL

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-uki-virtRocky

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-uki-virtRed Hat / RHEL

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-zfcpdumpRocky

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-zfcpdumpRed Hat / RHEL

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-zfcpdump-coreRocky

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-zfcpdump-coreRed Hat / RHEL

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-zfcpdump-debuginfoRocky

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-zfcpdump-debuginfoRed Hat / RHEL

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-zfcpdump-develRed Hat / RHEL

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-zfcpdump-develRocky

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-zfcpdump-devel-matchedRed Hat / RHEL

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-zfcpdump-devel-matchedRocky

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-zfcpdump-modulesRed Hat / RHEL

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-zfcpdump-modulesRocky

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-zfcpdump-modules-coreRed Hat / RHEL

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-zfcpdump-modules-coreRocky

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-zfcpdump-modules-extraRocky

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-zfcpdump-modules-extraRed Hat / RHEL

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

libperfRocky

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

libperfRed Hat / RHEL

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

libperf-debuginfoRocky

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

libperf-debuginfoRed Hat / RHEL

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

perfRed Hat / RHEL

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

perfRocky

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

perf-debuginfoRed Hat / RHEL

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

perf-debuginfoRocky

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

python3-perfRed Hat / RHEL

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

python3-perfRocky

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

python3-perf-debuginfoRed Hat / RHEL

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

python3-perf-debuginfoRocky

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

rtlaRocky

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

rtlaRed Hat / RHEL

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

rvRocky

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

rvRed Hat / RHEL

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

TridentStack Control can deploy fixes like this automatically across your Windows, macOS, and Linux fleet. See how it works

Remediation is compiled from vendor and distribution security advisories. Always confirm against the linked source for your exact version and platform.

CVSS v3 Vector

Exploitability

Attack VectorLocal

Attack ComplexityHigh

Privileges RequiredLow

User InteractionNone

ScopeUnchanged

Impact

ConfidentialityHigh

IntegrityHigh

AvailabilityHigh

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploit Intelligence

0.76%probability of exploitation in 30 days

51stpercentile

Moderate risk: more likely to be exploited than 51% of all known CVEs.

References

Third-Party Advisory2

Other references1

access.redhat.com

Related Vulnerabilities

Other CWE-385 vulnerabilities, ordered by exploit likelihood. View all

CVE	Severity	CVSS	EPSS	Exploited	Fix
CVE-2018-10845	Medium	5.9	3.6%	-	Fix
CVE-2018-10844	Medium	5.9	3.6%	-	Fix
CVE-2020-25659	Medium	5.9	2.5%	-	Fix
CVE-2025-9231	Medium	6.5	2.2%	-	Fix
CVE-2020-25657	Medium	5.9	1.7%	-	Fix
CVE-2020-25658	High	7.5	1.6%	-	Fix

Embed a live status badge for CVE-2023-3640

Markdown

[![CVE-2023-3640](https://tridentstack.com/cve/badge/CVE-2023-3640.svg)](https://tridentstack.com/cve/CVE-2023-3640)

HTML

<a href="https://tridentstack.com/cve/CVE-2023-3640"><img src="https://tridentstack.com/cve/badge/CVE-2023-3640.svg" alt="CVE-2023-3640"></a>

Find and fix vulnerabilities across your fleet

TridentStack Control continuously scans your Windows, macOS, and Linux fleet for known vulnerabilities, prioritizes them by severity and active exploitation, and patches them automatically.

See how it works Start freeThis CVE lookup is free and always will be.

This product uses NVD data but is not endorsed or certified by the NVD. EPSS scores courtesy of FIRST.org (https://www.first.org/epss). Source: CISA KEV Catalog. Data as of 2026-07-21.