CVE-2023-52597 — Improper Input Validation in Linux
Severity
4.0MEDIUMNVD
OSV7.5OSV6.5OSV5.5
EPSS
0.0%
top 94.50%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedMar 6
Latest updateAug 14
Description
In the Linux kernel, the following vulnerability has been resolved:
KVM: s390: fix setting of fpc register
kvm_arch_vcpu_ioctl_set_fpu() allows to set the floating point control
(fpc) register of a guest cpu. The new value is tested for validity by
temporarily loading it into the fpc register.
This may lead to corruption of the fpc register of the host process:
if an interrupt happens while the value is temporarily loaded into the fpc
register, and within interrupt context floating point or v…
CVSS vector
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:LExploitability: 1.4 | Impact: 2.5
Affected Packages5 packages
▶CVEListV5linux/linux4725c86055f5bbdcdfe47199c0715881893a2c79 — 3a04410b0bc7e056e0843ac598825dd359246d18+8
Also affects: Debian Linux 10.0