-

CVE-2023-54092

KVM: s390: pv: fix index value of replaced ASCE

In the Linux kernel, the following vulnerability has been resolved:

KVM: s390: pv: fix index value of replaced ASCE

The index field of the struct page corresponding to a guest ASCE should
be 0. When replacing the ASCE in s390_replace_asce(), the index of the
new ASCE should also be set to 0.

Having the wrong index might lead to the wrong addresses being passed
around when notifying pte invalidations, and eventually to validity
intercepts (VM crash) if the prefix gets unmapped and the notifier gets
called with the wrong address.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
Produkt Linux
Default Statusunaffected
Version 9d216035d173214cd33712d67d89220ef2283ebf
Version < 8e635da0e0d3cb45e32fa79b36218fb98281bc10
Status affected
Version 81ea65c9aefe100a9ace3082649bd84ae7dd9764
Version < 49a2686adddebe1ae76b4d368383208656ef6606
Status affected
Version faa2f72cb3569256480c5540d242c84e99965160
Version < 017f686bcb536ff23d49c143fdf9d1fd89a9a924
Status affected
Version faa2f72cb3569256480c5540d242c84e99965160
Version < f1c7a776338f2ac5e34da40e58fe9f33ea390a5e
Status affected
Version faa2f72cb3569256480c5540d242c84e99965160
Version < c2fceb59bbda16468bda82b002383bff59de89ab
Status affected
Version b5477f53e1d4de6191f50748a027251b14952eeb
Status affected
Version 63c71e83d5b6ab8adb5fcebef977052048016957
Status affected
HerstellerLinux
Produkt Linux
Default Statusaffected
Version 6.0
Status affected
Version 0
Version < 6.0
Status unaffected
Version <= 5.10.*
Version 5.10.190
Status unaffected
Version <= 5.15.*
Version 5.15.124
Status unaffected
Version <= 6.1.*
Version 6.1.43
Status unaffected
Version <= 6.4.*
Version 6.4.8
Status unaffected
Version <= *
Version 6.5
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.04% 0.101
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
Es wurden noch keine Informationen zu CWE veröffentlicht.