CVE-2023-54092

CVE-2023-54092

High · published December 24, 2025

CVSS v3.1
8.8
EPSS
0%
Percentile
11.7
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

KVM: s390: pv: fix index value of replaced ASCE

The index field of the struct page corresponding to a guest ASCE should

be 0. When replacing the ASCE in s390_replace_asce(), the index of the

new ASCE should also be set to 0.

Having the wrong index might lead to the wrong addresses being passed

around when notifying pte invalidations, and eventually to validity

intercepts (VM crash) if the prefix gets unmapped and the notifier gets

called with the wrong address.

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00219 · 11.7th percentile
Published
2025-12-24T18:16Z
References (5)
EPSS history
Timeline
  • 24 DEC 13:06Z
    KVM: s390: pv: fix index value of replaced ASCE
    cvelistv5