Page table walks conducted by the MMU during virtual to physical address translation…
Priority LOW 36CWE-200Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Information disclosure
- Confidentiality · integrity · availability
- High · None · None
- Fix status
- No fix listed
Attack profile from CVSS 3.0 · NVD. Fix status from CNA. Impact type from CWE-200.
Summary
Page table walks conducted by the MMU during virtual to physical address translation leave a trace in the last level cache of modern ARM processors. By performing a side-channel attack on the MMU operations, it is possible to leak data and code pointers from JavaScript, breaking ASLR.
Why it matters now
EPSS 0.01581 75th percentileScored 2026-11-07
Public exploit Yes 2 exploit referencesTagged by NVD
Fix No fix listed No fixed version in the sources yet
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | — | all versions | — | No fix listed | CNA |
- — Vendor— Affected all versions Fixed in — No fix listed CNA
CPE configurations NVD · 20
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:h:allwinner:a64:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Allwinner |
| cpe:2.3:h:amd:athlon_ii_640_x4:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | AMD |
| cpe:2.3:h:amd:e-350:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | AMD |
| cpe:2.3:h:amd:fx-8120_8-core:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | AMD |
| cpe:2.3:h:amd:fx-8320_8-core:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | AMD |
| cpe:2.3:h:amd:fx-8350_8-core:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | AMD |
| cpe:2.3:h:amd:phenom_9550_4-core:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | AMD |
| cpe:2.3:h:intel:atom_c2750:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Intel |
| cpe:2.3:h:intel:celeron_n2840:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Intel |
| cpe:2.3:h:intel:core_i5_m480:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Intel |
- cpe:2.3:h:allwinner:a64:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Allwinner
- cpe:2.3:h:amd:athlon_ii_640_x4:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·AMD
- cpe:2.3:h:amd:e-350:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·AMD
- cpe:2.3:h:amd:fx-8120_8-core:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·AMD
- cpe:2.3:h:amd:fx-8320_8-core:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·AMD
- cpe:2.3:h:amd:fx-8350_8-core:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·AMD
- cpe:2.3:h:amd:phenom_9550_4-core:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·AMD
- cpe:2.3:h:intel:atom_c2750:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Intel
- cpe:2.3:h:intel:celeron_n2840:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Intel
- cpe:2.3:h:intel:core_i5_m480:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Intel
Show 10 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:h:intel:core_i7-2620qm:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Intel |
| cpe:2.3:h:intel:core_i7-3632qm:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Intel |
| cpe:2.3:h:intel:core_i7-4500u:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Intel |
| cpe:2.3:h:intel:core_i7-6700k:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Intel |
| cpe:2.3:h:intel:core_i7_920:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Intel |
| cpe:2.3:h:intel:xeon_e3-1240_v5:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Intel |
| cpe:2.3:h:intel:xeon_e5-2658_v2:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Intel |
| cpe:2.3:h:nvidia:tegra_k1_cd570m-a1:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | NVIDIA |
| cpe:2.3:h:nvidia:tegra_k1_cd580m-a1:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | NVIDIA |
| cpe:2.3:h:samsung:exynos_5800:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Samsung |
- cpe:2.3:h:intel:core_i7-2620qm:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Intel
- cpe:2.3:h:intel:core_i7-3632qm:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Intel
- cpe:2.3:h:intel:core_i7-4500u:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Intel
- cpe:2.3:h:intel:core_i7-6700k:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Intel
- cpe:2.3:h:intel:core_i7_920:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Intel
- cpe:2.3:h:intel:xeon_e3-1240_v5:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Intel
- cpe:2.3:h:intel:xeon_e5-2658_v2:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Intel
- cpe:2.3:h:nvidia:tegra_k1_cd570m-a1:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·NVIDIA
- cpe:2.3:h:nvidia:tegra_k1_cd580m-a1:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·NVIDIA
- cpe:2.3:h:samsung:exynos_5800:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Samsung
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2017-5927
- 2026-10-03 Alias added: GHSA-q989-rvf8-jgqp
References
Sources
- CVE-2017-5927 · CVE Program
- CVE-2017-5927 · NVD
- FIRST EPSS
- GHSA-q989-rvf8-jgqp · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences