CVE-2023-5090

Kernel: kvm: svm: improper check in svm_set_x2apic_msr_interception allows direct access to host x2apic msrs

State: Published
Severity: 6.0 Medium
Published: Nov 6, 2023
Updated: Aug 6, 2026
Reserved: Sep 20, 2023

Description

A flaw was found in KVM. An improper check in svm_set_x2apic_msr_interception() may allow direct access to host x2apic msrs when the guest resets its apic, potentially leading to a denial of service condition.

Scores

CVSS	Score	Vector	Source
3.1	6.0 Medium	CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H	redhat

Weaknesses

CWE-755 Improper Handling of Exceptional Conditions

Affected Products

Product	Versions
Red Hat Enterprise Linux 8Red Hat	0:4.18.0-553.8.1.rt7.349.el8_10 and laterNot affected
Red Hat Enterprise Linux 8Red Hat	0:4.18.0-553.8.1.el8_10 and laterNot affected
Red Hat Enterprise Linux 9Red Hat	0:5.14.0-427.16.1.el9_4 and laterNot affected
Red Hat Enterprise Linux 9Red Hat	0:5.14.0-427.16.1.el9_4 and laterNot affected
Red Hat Enterprise Linux 9.2 Extended Update SupportRed Hat	0:5.14.0-284.69.1.el9_2 and laterNot affected
Red Hat Enterprise Linux 9.2 Extended Update SupportRed Hat	0:5.14.0-284.69.1.rt14.354.el9_2 and laterNot affected
Red Hat Enterprise Linux 6Red Hat
Red Hat Enterprise Linux 7Red Hat
Red Hat Enterprise Linux 7Red Hat
Red Hat Enterprise Linux 9Red Hat

References

RHSA-2024:2758vendor-advisory
RHSA-2024:3854vendor-advisory
RHSA-2024:3855vendor-advisory
RHSA-2024:4211vendor-advisory
RHSA-2024:4352vendor-advisory
https://access.redhat.com/security/cve/CVE-2023-5090vdb-entry
RHBZ#2248122issue-tracking

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.