CVE-2017-5927 - CVE House
Back to Database
Status published High CVE-2017-5927

Page table walks conducted by the MMU during virtual to...

Vulnerability Description

Page table walks conducted by the MMU during virtual to physical address translation leave a trace in the last level cache of modern ARM processors. By performing a side-channel attack on the MMU operations, it is possible to leak data and code pointers from JavaScript, breaking ASLR.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2017-5927

Credits & Attribution

No credits recorded in the NVD database.

References

More from allwinner

View All →
CVE-2017-5926
Page table walks conducted by the MMU during virtual to...
High 7.5
CVE-2017-5925
Page table walks conducted by the MMU during virtual to...
High 7.5
CVE-2016-10225
The sunxi-debug driver in Allwinner 3.4 legacy kernel for H3,...
High 7.8

Affected Vendor

Affected Software

a64, athlon ii 640 x4, e-350, fx-8120 8-core, fx-8320 8-core, fx-8350 8-core, phenom 9550 4-core, atom c2750, celeron n2840, core i5 m480, core i7-2620qm, core i7-3632qm, core i7-4500u, core i7-6700k, core i7 920, xeon e3-1240 v5, xeon e5-2658 v2, tegra k1 cd570m-a1, tegra k1 cd580m-a1, exynos 5800
Vulnerable Versions:
Unknown

Timeline

Official Publish: February 27th, 2017
Last Modified: August 5th, 2024
Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.