QID 356908

2024-01-03:( CVE-2023-46862 was added to this advisory. an issue was discovered in the linux kernel before 6.5.9, exploitable by local users with userspace access to mmio registers.
Incorrect access checking in the #vc handler and instruction emulation of the sev-es emulation of mmio accesses could lead to arbitrary write access to kernel memory (and thus privilege escalation).
This depends on a race condition through which userspace can replace an instruction before the #vc handler reads it. (
( CVE-2023-46813) an issue was discovered in the linux kernel through 6.5.9.
During a race with sq thread exit, an io_uring/fdinfo.c io_uring_show_fdinfo null pointer dereference can occur. (
( CVE-2023-46862) x86: kvm: svm: always update the x2avic msr interception (cve-2023-5090) a heap out-of-bounds write vulnerability in the linux kernel's linux kernel performance events (perf) component can be exploited to achieve local privilege escalation. if perf_read_group() is called while an event's sibling_list is smaller than its child's sibling_list, it can increment or write to memory locations outside of the allocated buffer. we recommend upgrading past commit 32671e3799ca2e4590773fd0e63aaa4229e50c06. (
( CVE-2023-5717)

Successful exploitation of this vulnerability could lead to a securitybreach or could affect integrity, availability, and confidentiality.