What is CVE-2023-1637?

CVE-2023-1637 is a medium-severity vulnerability in Linux Kernel, classified under Sensitive Information in Resource Not Removed Before Reuse. CVSS score: 5.5/10. Published 2023-03-27.

How severe is CVE-2023-1637?

Medium severity. CVSS v3 base score is 5.5 out of 10.

Vulnerability in Linux Kernel

CVE-2023-1637

A flaw that boot CPU could be vulnerable for the speculative execution behavior kind of attacks in the Linux kernel X86 CPU Power management options functionality was found in the way user resuming CPU from suspend-to-RAM. A local user could use this flaw to potentially get unauthorized access to some memory of the CPU similar to the speculative execution behavior kind of attacks.

Published 2023-03-27 · last modified 2026-06-17.

CVSS v3 metric

CVSS v3 base score 5.5 (Medium). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N.

EPSS exploit prediction

EPSS: 0.002 (11.7th percentile), scored 2026-10-19.

Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 12th percentile — 11.7% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.

EPSS over last 30 days · oldest: 0.002 · newest: 0.002 · change: 0.000

Affected products

Linux Kernel — versions 5.18
Kernel — versions Linux kernel 5.18-rc2

Weakness classification (CWE)

References

git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/ (Patch, Mailing List)
sourceware.org/bugzilla/show_bug.cgi (Issue Tracking)

Frequently asked questions

What is CVE-2023-1637?: CVE-2023-1637 is a medium-severity vulnerability in Linux Kernel, classified under Sensitive Information in Resource Not Removed Before Reuse. CVSS score: 5.5/10. Published 2023-03-27.
How severe is CVE-2023-1637?: Medium severity. CVSS v3 base score is 5.5 out of 10.