CVE-2023-46813
Summary
| CVE | CVE-2023-46813 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2023-10-27 03:15:00 UTC |
| Updated | 2023-11-07 20:42:00 UTC |
| Description | An issue was discovered in the Linux kernel before 6.5.9, exploitable by local users with userspace access to MMIO registers. Incorrect access checking in the #VC handler and instruction emulation of the SEV-ES emulation of MMIO accesses could lead to arbitrary write access to kernel memory (and thus privilege escalation). This depends on a race condition through which userspace can replace an instruction before the #VC handler reads it. |
Risk And Classification
Problem Types: NVD-CWE-Other
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Operating System | Linux | Linux Kernel | All | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| kernel/git/torvalds/linux.git - Linux kernel source tree | MISC | git.kernel.org | |
| kernel/git/torvalds/linux.git - Linux kernel source tree | MISC | git.kernel.org | |
| 1212649 – VUL-0: kernel: SEV-ES local priv escalation | MISC | bugzilla.suse.com | |
| cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.5.9 | MISC | cdn.kernel.org | |
| kernel/git/torvalds/linux.git - Linux kernel source tree | MISC | git.kernel.org | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
Legacy QID Mappings
- 161318 Oracle Enterprise Linux Security Update for kernel (ELSA-2024-12094)
- 161352 Oracle Enterprise Linux Security Update for unbreakable enterprise kernel (ELSA-2024-12159)
- 161390 Oracle Enterprise Linux Security Update for kernel (ELSA-2024-12187)
- 161402 Oracle Enterprise Linux Security Update for kernel (ELSA-2024-0897)
- 161404 Oracle Enterprise Linux Security Update for kernel (ELSA-2024-0461)
- 199975 Ubuntu Security Notification for Linux kernel (OEM) Vulnerabilities (USN-6533-1)
- 200099 Ubuntu Security Notification for Linux kernel Vulnerabilities (USN-6624-1)
- 200100 Ubuntu Security Notification for Linux kernel Vulnerabilities (USN-6626-1)
- 200103 Ubuntu Security Notification for Linux kernel (Intel IoTG) Vulnerabilities (USN-6628-1)
- 200111 Ubuntu Security Notification for Linux kernel Vulnerabilities (USN-6626-2)
- 200118 Ubuntu Security Notification for Linux kernel (Intel IoTG) Vulnerabilities (USN-6628-2)
- 200120 Ubuntu Security Notification for Linux kernel (Azure) Vulnerabilities (USN-6626-3)
- 200132 Ubuntu Security Notification for Linux kernel (Azure) Vulnerabilities (USN-6652-1)
- 242759 Red Hat Update for kernel (RHSA-2024:0432)
- 242789 Red Hat Update for kernel (RHSA-2024:0575)
- 242839 Red Hat Update for kernel (RHSA-2024:0461)
- 242845 Red Hat Update for kernel (RHSA-2024:0448)
- 242846 Red Hat Update for kernel-rt (RHSA-2024:0439)
- 242847 Red Hat Update for kernel-rt (RHSA-2024:0431)
- 242890 Red Hat Update for kernel (RHSA-2024:0724)
- 242939 Red Hat Update for kernel (RHSA-2024:0897)
- 242983 Red Hat Update for kernel-rt (RHSA-2024:0881)
- 356887 Amazon Linux Security Advisory for kernel : ALAS2KERNEL-5.10-2023-043
- 356889 Amazon Linux Security Advisory for kernel : ALAS2KERNEL-5.15-2023-030
- 356908 Amazon Linux Security Advisory for kernel : ALAS2023-2023-430
- 6000419 Debian Security Update for linux (DSA 5594-1)
- 6000428 Debian Security Update for linux-5.10 (DLA 3711-1)
- 6140016 AWS Bottlerocket Security Update for kernel (GHSA-v6mr-65pv-hxxx)
- 6140270 AWS Bottlerocket Security Update for kernel (GHSA-v6mr-65pv-hxxx)
- 673595 EulerOS Security Update for kernel (EulerOS-SA-2023-3247)
- 673692 EulerOS Security Update for kernel (EulerOS-SA-2023-3275)
- 755240 SUSE Enterprise Linux Security Update for the Linux Kernel (SUSE-SU-2023:4375-1)
- 755249 SUSE Enterprise Linux Security Update for the Linux Kernel (SUSE-SU-2023:4414-1)
- 755563 SUSE Security Update for the linux kernel (SUSE-SU-2023:4351-1)
- 755566 SUSE Security Update for the linux kernel (SUSE-SU-2023:4345-1)
- 756013 SUSE Enterprise Linux Security Update for the Linux Kernel RT (Live Patch 6 for SLE 15 SP5) (SUSE-SU-2024:0986-1)
- 756014 SUSE Enterprise Linux Security Update for the Linux Kernel RT (Live Patch 1 for SLE 15 SP5) (SUSE-SU-2024:0995-1)
- 756028 SUSE Enterprise Linux Security Update for the Linux Kernel (Live Patch 2 for SLE 15 SP5) (SUSE-SU-2024:1023-1)
- 756030 SUSE Enterprise Linux Security Update for the Linux Kernel (Live Patch 6 for SLE 15 SP5) (SUSE-SU-2024:1045-1)
- 756032 SUSE Enterprise Linux Security Update for the Linux Kernel (Live Patch 0 for SLE 15 SP5) (SUSE-SU-2024:1039-1)
- 756041 SUSE Enterprise Linux Security Update for the Linux Kernel (Live Patch 18 for SLE 15 SP4) (SUSE-SU-2024:1063-1)
- 756047 SUSE Enterprise Linux Security Update for the Linux Kernel RT (Live Patch 0 for SLE 15 SP5) (SUSE-SU-2024:1097-1)
- 907618 Common Base Linux Mariner (CBL-Mariner) Security Update for kernel (31815-1)
- 941584 AlmaLinux Security Update for kernel (ALSA-2024:0897)