Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2023-46813

Опубликовано: 27 окт. 2023
Источник: nvd
CVSS3: 7
EPSS Низкий

Описание

An issue was discovered in the Linux kernel before 6.5.9, exploitable by local users with userspace access to MMIO registers. Incorrect access checking in the #VC handler and instruction emulation of the SEV-ES emulation of MMIO accesses could lead to arbitrary write access to kernel memory (and thus privilege escalation). This depends on a race condition through which userspace can replace an instruction before the #VC handler reads it.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Версия до 6.5.9 (исключая)

EPSS

Процентиль: 39%
0.00166
Низкий

7 High

CVSS3

Дефекты

NVD-CWE-Other

Связанные уязвимости

CVSS3: 7
ubuntu
больше 1 года назад

An issue was discovered in the Linux kernel before 6.5.9, exploitable by local users with userspace access to MMIO registers. Incorrect access checking in the #VC handler and instruction emulation of the SEV-ES emulation of MMIO accesses could lead to arbitrary write access to kernel memory (and thus privilege escalation). This depends on a race condition through which userspace can replace an instruction before the #VC handler reads it.

CVSS3: 7
redhat
больше 1 года назад

An issue was discovered in the Linux kernel before 6.5.9, exploitable by local users with userspace access to MMIO registers. Incorrect access checking in the #VC handler and instruction emulation of the SEV-ES emulation of MMIO accesses could lead to arbitrary write access to kernel memory (and thus privilege escalation). This depends on a race condition through which userspace can replace an instruction before the #VC handler reads it.

CVSS3: 7
msrc
больше 1 года назад

Описание отсутствует

CVSS3: 7
debian
больше 1 года назад

An issue was discovered in the Linux kernel before 6.5.9, exploitable ...

CVSS3: 7
github
больше 1 года назад

An issue was discovered in the Linux kernel before 6.5.9, exploitable by local users with userspace access to MMIO registers. Incorrect access checking in the #VC handler and instruction emulation of the SEV-ES emulation of MMIO accesses could lead to arbitrary write access to kernel memory (and thus privilege escalation). This depends on a race condition through which userspace can replace an instruction before the #VC handler reads it.

EPSS

Процентиль: 39%
0.00166
Низкий

7 High

CVSS3

Дефекты

NVD-CWE-Other