I've added support for #EntryBleed prefetch #KASLR bypass (CVE-2022-4543) to [KASLD](https://github.com/bcoles/kasld).
Should work for Intel x86_64 CPUs (with KPTI enabled or disabled) and AMD x86_64 CPUs with KPTI disabled.
#EntryBleed, a #Linux #kernel bug that allows low privileged attackers to break KASLR under KPTI for Intel based systems:
https://www.willsroot.io/2022/12/entrybleed.html #LinuxKernel
"[…] I’ve discovered that Linux KPTI has implementation issues that can allow any unprivileged local attacker to bypass KASLR on Intel based systems. While technically only an info-leak, it still provides a primitive that has serious implications for bugs previously considered too hard to exploit and was assigned CVE-2022-4543. […]"
#entrybleed #linux #kernel #linuxkernel