CVE-2023-54092
KVM: s390: pv: fix index value of replaced ASCE
- Published
- Updated
- Reserved
- Assigned by
- Linux
Description
In the Linux kernel, the following vulnerability has been resolved: KVM: s390: pv: fix index value of replaced ASCE The index field of the struct page corresponding to a guest ASCE should be 0. When replacing the ASCE in s390_replace_asce(), the index of the new ASCE should also be set to 0. Having the wrong index might lead to the wrong addresses being passed around when notifying pte invalidations, and eventually to validity intercepts (VM crash) if the prefix gets unmapped and the notifier gets called with the wrong address.
Timeline
ID reserved
By Linux
Published
- 10 months later
· 10 months later
Record updated
Changes after publication (a new score, a public exploit, EPSS crossing 1, 10 or 50 %, leaving KEV) are kept since November 2026; earlier ones are not known.
Scores
| Scored by | CVSS | Score | Vector |
|---|---|---|---|
| LinuxCNA (assigner) | 3.1 | High8.8 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H |
| NVDNVD · Deferred | 3.1 | High8.8 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H |
- EPSS (exploitation in 30 days)
- 0.22% · top 88% of all CVEs (7 Nov 2026)
- CISA SSVC
- Exploitation: none · Automatable: no · Technical impact: total
The list uses the assigner's score when there is one, then CISA's, then NVD's: High 8.8.
Affected products
- affected 9d216035d173214cd33712d67d89220ef2283ebf – < 8e635da0e0d3cb45e32fa79b36218fb98281bc10
- affected 81ea65c9aefe100a9ace3082649bd84ae7dd9764 – < 49a2686adddebe1ae76b4d368383208656ef6606
- affected faa2f72cb3569256480c5540d242c84e99965160 – < 017f686bcb536ff23d49c143fdf9d1fd89a9a924
- affected faa2f72cb3569256480c5540d242c84e99965160 – < f1c7a776338f2ac5e34da40e58fe9f33ea390a5e
- affected faa2f72cb3569256480c5540d242c84e99965160 – < c2fceb59bbda16468bda82b002383bff59de89ab
- affected b5477f53e1d4de6191f50748a027251b14952eeb
- affected 63c71e83d5b6ab8adb5fcebef977052048016957
- affected 5.10.137 – < 5.10.190
- affected 5.15.61 – < 5.15.124
- affected 5.18.18 – < 5.19
- affected 5.19.2 – < 5.20
- affected 6.0
- unaffected < 6.0
- unaffected 5.10.190 – ≤ 5.10.*
- unaffected 5.15.124 – ≤ 5.15.*
- unaffected 6.1.43 – ≤ 6.1.*
- unaffected 6.4.8 – ≤ 6.4.*
- unaffected 6.5 – ≤ *
References (5)
- https://git.kernel.org/stable/c/8e635da0e0d3cb45e32fa79b36218fb98281bc10 (opens in a new tab)
- https://git.kernel.org/stable/c/49a2686adddebe1ae76b4d368383208656ef6606 (opens in a new tab)
- https://git.kernel.org/stable/c/017f686bcb536ff23d49c143fdf9d1fd89a9a924 (opens in a new tab)
- https://git.kernel.org/stable/c/f1c7a776338f2ac5e34da40e58fe9f33ea390a5e (opens in a new tab)
- https://git.kernel.org/stable/c/c2fceb59bbda16468bda82b002383bff59de89ab (opens in a new tab)
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisories (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Badge for a README or a ticket
[](https://trackcve.app/cve/CVE-2023-54092)Record last updated .