CVE-2023-54092

KVM: s390: pv: fix index value of replaced ASCE

State: Published
Severity: 8.8 High
Published: Dec 24, 2025
Updated: Oct 15, 2026
Reserved: Dec 24, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

KVM: s390: pv: fix index value of replaced ASCE

The index field of the struct page corresponding to a guest ASCE should be 0. When replacing the ASCE in s390_replace_asce(), the index of the new ASCE should also be set to 0.

Having the wrong index might lead to the wrong addresses being passed around when notifying pte invalidations, and eventually to validity intercepts (VM crash) if the prefix gets unmapped and the notifier gets called with the wrong address.

Scores

CVSS	Score	Vector	Source
3.1	8.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	9d216035d173214cd33712d67d89220ef2283ebf to before 8e635da0e0d3cb45e32fa79b36218fb98281bc10Affected 81ea65c9aefe100a9ace3082649bd84ae7dd9764 to before 49a2686adddebe1ae76b4d368383208656ef6606Affected faa2f72cb3569256480c5540d242c84e99965160 to before 017f686bcb536ff23d49c143fdf9d1fd89a9a924Affected faa2f72cb3569256480c5540d242c84e99965160 to before f1c7a776338f2ac5e34da40e58fe9f33ea390a5eAffected faa2f72cb3569256480c5540d242c84e99965160 to before c2fceb59bbda16468bda82b002383bff59de89abAffected b5477f53e1d4de6191f50748a027251b14952eebAffected 63c71e83d5b6ab8adb5fcebef977052048016957Affected 5.10.137 to before 5.10.190Affected 5.15.61 to before 5.15.124Affected 5.18.18 to before 5.19Affected 5.19.2 to before 5.20Affected
LinuxLinux	6.0Affected before 6.0Not affected 5.10.190 through 5.10.Not affected 5.15.124 through 5.15.Not affected 6.1.43 through 6.1.Not affected 6.4.8 through 6.4.Not affected 6.5 and laterNot affected

Product

Versions

LinuxLinux

9d216035d173214cd33712d67d89220ef2283ebf to before 8e635da0e0d3cb45e32fa79b36218fb98281bc10Affected
81ea65c9aefe100a9ace3082649bd84ae7dd9764 to before 49a2686adddebe1ae76b4d368383208656ef6606Affected
faa2f72cb3569256480c5540d242c84e99965160 to before 017f686bcb536ff23d49c143fdf9d1fd89a9a924Affected
faa2f72cb3569256480c5540d242c84e99965160 to before f1c7a776338f2ac5e34da40e58fe9f33ea390a5eAffected
faa2f72cb3569256480c5540d242c84e99965160 to before c2fceb59bbda16468bda82b002383bff59de89abAffected
b5477f53e1d4de6191f50748a027251b14952eebAffected
63c71e83d5b6ab8adb5fcebef977052048016957Affected
5.10.137 to before 5.10.190Affected
5.15.61 to before 5.15.124Affected
5.18.18 to before 5.19Affected
5.19.2 to before 5.20Affected

LinuxLinux

6.0Affected
before 6.0Not affected
5.10.190 through 5.10.*Not affected
5.15.124 through 5.15.*Not affected
6.1.43 through 6.1.*Not affected
6.4.8 through 6.4.*Not affected
6.5 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.