CVE-2023-5090

Kernel: kvm: svm: improper check in svm_set_x2apic_msr_interception allows direct access to host x2apic msrs

Published Nov 6, 2023 CVSS 3.1 · 6 Medium EPSS < 1% KEV · Not listed
Description
A flaw was found in KVM. An improper check in svm_set_x2apic_msr_interception() may allow direct access to host x2apic msrs when the guest resets its apic, potentially leading to a denial of service condition.

Remediation

Vendor Workaround

Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2023-57430 A flaw was found in KVM. An improper check in svm_set_x2apic_msr_interception() may allow direct access to host x2apic msrs when the guest resets its apic, potentially leading to a denial of service condition.
Ubuntu USN Ubuntu USN USN-6497-1 Linux kernel (OEM) vulnerabilities
Ubuntu USN Ubuntu USN USN-6502-1 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-6502-2 Linux kernel (Oracle) vulnerabilities
Ubuntu USN Ubuntu USN USN-6502-3 Linux kernel (NVIDIA) vulnerabilities
Ubuntu USN Ubuntu USN USN-6502-4 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-6503-1 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-6520-1 Linux kernel (StarFive) vulnerabilities
Ubuntu USN Ubuntu USN USN-6537-1 Linux kernel (GCP) vulnerabilities
Ubuntu USN Ubuntu USN USN-6572-1 Linux kernel (Azure) vulnerabilities
History
Type Values Removed Values Added
First Time appeared Redhat rhel Els
CPEs cpe:/o:redhat:enterprise_linux:6
cpe:/o:redhat:enterprise_linux:7
cpe:/o:redhat:rhel_els:6
cpe:/o:redhat:rhel_els:7
Vendors & Products Redhat rhel Els
Type Values Removed Values Added
CPEs cpe:/a:redhat:enterprise_linux:9
Type Values Removed Values Added
CPEs cpe:/a:redhat:enterprise_linux:9::appstream
cpe:/a:redhat:enterprise_linux:9::crb
cpe:/a:redhat:enterprise_linux:9::nfv
cpe:/a:redhat:enterprise_linux:9::realtime
cpe:/o:redhat:enterprise_linux:9::baseos
References
Weaknesses

Sources

Status
PUBLISHED
Assigner
redhat
Published
Updated
Nov 7, 2026, 6:15 AM
Reserved
Sep 20, 2023, 3:29 PM
Status
Modified
Published
Nov 6, 2023, 11:15 AM
Modified
Nov 7, 2026, 7:17 AM
Severity
Moderate
Public date
Sep 28, 2023, 12:00 AM