CVE-2023-30456: High severity Linux Linux kernel vulnerability
An issue was discovered in arch/x86/kvm/vmx/nested.c in the Linux kernel before 6.2.8. nVMX on x8664 lacks consistency checks for CR0 and CR4.
Other sources
Linux Kernel could allow a local authenticated attacker to gain elevated privileges on the system, caused by the lack of consistency checks for CR0 and CR4 in arch/x86/kvm/vmx/nested.c. By sending a specially-crafted request, an authenticated attacker could exploit this vulnerability to gain elevated privileges.
— IBM
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2023-30456?
CVE-2023-30456 is considered a high-severity vulnerability due to the lack of consistency checks in nVMX on x86_64.
How do I fix CVE-2023-30456?
To fix CVE-2023-30456, upgrade the Linux kernel to version 6.3 or later, or apply the recommended patches.
Which versions of the Linux kernel are affected by CVE-2023-30456?
CVE-2023-30456 affects all versions of the Linux kernel prior to 6.2.8.
What components are impacted by CVE-2023-30456?
CVE-2023-30456 impacts the nVMX functionality in the Linux kernel on x86_64 architectures.
Is there a workaround for CVE-2023-30456 until a fix is applied?
There are no specific workarounds for CVE-2023-30456; the best action is to apply the fix as soon as possible.