An issue was discovered in the Linux kernel before 6.5.9, exploitable by local users with userspace access to MMIO registers. Incorrect access checking in the #VC handler and instruction emulation of the SEV-ES emulation of MMIO accesses could lead to arbitrary write access to kernel memory (and thus privilege escalation). This depends on a race condition through which userspace can replace an instruction before the #VC handler reads it.
References
Configurations
History
11 Jan 2024, 21:15
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
07 Nov 2023, 20:42
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.0 |
| CPE | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | |
| CWE | NVD-CWE-Other | |
| References | (MISC) https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=63e44bc52047f182601e7817da969a105aa1f721 - Mailing List, Patch | |
| References | (MISC) https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=a37cd2a59d0cb270b1bba568fd3a3b8668b9d3ba - Mailing List, Patch | |
| References | (MISC) https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=b9cb9c45583b911e0db71d09caa6b56469eb2bdf - Mailing List, Patch | |
| References | (MISC) https://bugzilla.suse.com/show_bug.cgi?id=1212649 - Issue Tracking | |
| References | (MISC) https://cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.5.9 - Mailing List, Patch | |
| First Time |
Linux
Linux linux Kernel |
27 Oct 2023, 03:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-10-27 03:15
Updated : 2024-02-28 20:33
NVD link : CVE-2023-46813
Mitre link : CVE-2023-46813
CVE.ORG link : CVE-2023-46813
JSON object : View
Products Affected
linux
- linux_kernel
CWE