CVE-2023-5090 | THREATINT

Assigner	redhat
Reserved	2023-09-20
Published	2023-11-06
Updated	2024-09-13

Description

A flaw was found in KVM. An improper check in svm_set_x2apic_msr_interception() may allow direct access to host x2apic msrs when the guest resets its apic, potentially leading to a denial of service condition.

MEDIUM: 6.0

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H

Problem types

Improper Handling of Exceptional Conditions

Product status

Default status

affected

0:4.18.0-553.8.1.rt7.349.el8_10 before *

unaffected

Default status

affected

0:4.18.0-553.8.1.el8_10 before *

unaffected

Default status

affected

0:5.14.0-427.16.1.el9_4 before *

unaffected

Default status

affected

0:5.14.0-427.16.1.el9_4 before *

unaffected

Default status

affected

0:5.14.0-284.69.1.el9_2 before *

unaffected

Default status

affected

0:5.14.0-284.69.1.rt14.354.el9_2 before *

unaffected

Default status

unaffected

Default status

unaffected

Default status

unaffected

Default status

affected

Timeline

2023-09-20:	Reported to Red Hat.
2023-09-28:	Made public.

Credits

This issue was discovered by Maxim Levitsky (Red Hat).

References

https://access.redhat.com/errata/RHSA-2024:2758 (RHSA-2024:2758) vendor-advisory

https://access.redhat.com/errata/RHSA-2024:3854 (RHSA-2024:3854) vendor-advisory

https://access.redhat.com/errata/RHSA-2024:3855 (RHSA-2024:3855) vendor-advisory

https://access.redhat.com/errata/RHSA-2024:4211 (RHSA-2024:4211) vendor-advisory

https://access.redhat.com/errata/RHSA-2024:4352 (RHSA-2024:4352) vendor-advisory

https://access.redhat.com/security/cve/CVE-2023-5090 vdb-entry

https://bugzilla.redhat.com/show_bug.cgi?id=2248122 (RHBZ#2248122) issue-tracking

cve.org CVE-2023-5090

nvd.nist.gov CVE-2023-5090

Download JSON