CVE-2023-46813

CVSS v3.1 7 (High)
70% Progress
EPSS 0.04 % (5th)
0.04% Progress
Affected Products 1
Advisories 32

An issue was discovered in the Linux kernel before 6.5.9, exploitable by local users with userspace access to MMIO registers. Incorrect access checking in the #VC handler and instruction emulation of the SEV-ES emulation of MMIO accesses could lead to arbitrary write access to kernel memory (and thus privilege escalation). This depends on a race condition through which userspace can replace an instruction before the #VC handler reads it.

Weaknesses
CWE-NVD-Other
CVE Status
PUBLISHED
CNA
MITRE
Published Date
2023-10-27 03:15:08
(10 months ago)
Updated Date
2024-01-11 21:15:10
(8 months ago)

Affected Products

Loading...
Loading...

Configuration #1

    CPE23 From Up To
  Linux Kernel prior 6.5.9 version cpe:2.3:o:linux:linux_kernel < 6.5.9
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...