CVE-2023-53205

KVM: s390/diag: fix racy access of physical cpu number in diag 9c handler

State: Published
Severity: 7.3 High
Published: Sep 15, 2025
Updated: Oct 15, 2026
Reserved: Sep 15, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

KVM: s390/diag: fix racy access of physical cpu number in diag 9c handler

We do check for target CPU == -1, but this might change at the time we are going to use it. Hold the physical target CPU in a local variable to avoid out-of-bound accesses to the cpu arrays.

Scores

CVSS	Score	Vector	Source
3.1	7.3 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	87e28a15c42cc592009c32a8c20e5789059027c2 to before a9ccf140a2a03a0ae82be4bdfbdd17bdaea72ff5Affected 87e28a15c42cc592009c32a8c20e5789059027c2 to before 86bfb18bad60fc468e5f112cbbd918462a8dd435Affected 87e28a15c42cc592009c32a8c20e5789059027c2 to before dc7e0192c470a53d847c79a2796f9ac429477a26Affected 87e28a15c42cc592009c32a8c20e5789059027c2 to before 0bc380beb78aa352eadbc21d934dd9606fcee808Affected
LinuxLinux	5.13Affected before 5.13Not affected 5.15.121 through 5.15.Not affected 6.1.39 through 6.1.Not affected 6.4.4 through 6.4.*Not affected 6.5 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.