CVE-2023-46813: Race Condition
An issue was discovered in the Linux kernel before 6.5.9 exploitable by local users with userspace access to MMIO registers. Incorrect access checking in the #VC handler and instruction emulation of the SEV-ES emulation of MMIO accesses could lead to arbitrary write access to kernel memory (and thus privilege escalation). This depends on a race condition through which userspace can replace an instruction before the #VC handler reads it.
Other sources
An issue was discovered in the Linux kernel before 6.5.9, exploitable by local users with userspace access to MMIO registers. Incorrect access checking in the #VC handler and instruction emulation of the SEV-ES emulation of MMIO accesses could lead to arbitrary write access to kernel memory (and thus privilege escalation). This depends on a race condition through which userspace can replace an instruction before the #VC handler reads it.
— Launchpad
Linux Kernel could allow a local authenticated attacker to gain elevated privileges on the system, caused by incorrect access checking in the #VC handler and instruction emulation of the SEV-ES emulation of MMIO accesses. By sending a specially crafted request, an authenticated attacker could exploit this vulnerability to gain elevated privileges.
— IBM
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the CVE ID for this vulnerability?
The CVE ID for this vulnerability is CVE-2023-46813.
What is the severity of CVE-2023-46813?
The severity of CVE-2023-46813 is high with a severity value of 7.
How does CVE-2023-46813 affect Linux kernel?
CVE-2023-46813 affects Linux kernel versions before 6.5.9.
What is the vulnerability description for CVE-2023-46813?
CVE-2023-46813 is a vulnerability in the Linux kernel that allows local users with userspace access to MMIO registers to gain arbitrary write access to kernel memory.
How can I fix CVE-2023-46813?
To fix CVE-2023-46813, update your Linux kernel to version 6.5.9 or later.