CVE-2023-54092
published 2025-12-24CVE-2023-54092: In the Linux kernel, the following vulnerability has been resolved: KVM: s390: pv: fix index value of replaced ASCE The index field of the struct page…
PriorityP343high8.8CVSS 3.1
AVLACLPRLUINSCCHIHAH
EPSS
0.22%
12.3th percentile
In the Linux kernel, the following vulnerability has been resolved:
KVM: s390: pv: fix index value of replaced ASCE
The index field of the struct page corresponding to a guest ASCE should
be 0. When replacing the ASCE in s390_replace_asce(), the index of the
new ASCE should also be set to 0.
Having the wrong index might lead to the wrong addresses being passed
around when notifying pte invalidations, and eventually to validity
intercepts (VM crash) if the prefix gets unmapped and the notifier gets
called with the wrong address.
Affected
21 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 6.1.52-1 (bookworm) | linux 6.1.52-1 (bookworm) |
| linux | linux | — | — |
| linux | linux | — | — |
| linux | linux | — | — |
| linux | linux | >= 5.10.137 < 5.10.190 | 5.10.190 |
| linux | linux | >= 5.15.61 < 5.15.124 | 5.15.124 |
| linux | linux | >= 5.18.18 < 5.19 | 5.19 |
| linux | linux | >= 5.19.2 < 5.20 | 5.20 |
| linux | linux | >= 81ea65c9aefe100a9ace3082649bd84ae7dd9764 < 49a2686adddebe1ae76b4d368383208656ef6606 | 49a2686adddebe1ae76b4d368383208656ef6606 |
| linux | linux | >= 9d216035d173214cd33712d67d89220ef2283ebf < 8e635da0e0d3cb45e32fa79b36218fb98281bc10 | 8e635da0e0d3cb45e32fa79b36218fb98281bc10 |
| linux | linux | >= faa2f72cb3569256480c5540d242c84e99965160 < 017f686bcb536ff23d49c143fdf9d1fd89a9a924 | 017f686bcb536ff23d49c143fdf9d1fd89a9a924 |
| linux | linux | >= faa2f72cb3569256480c5540d242c84e99965160 < f1c7a776338f2ac5e34da40e58fe9f33ea390a5e | f1c7a776338f2ac5e34da40e58fe9f33ea390a5e |
| linux | linux | >= faa2f72cb3569256480c5540d242c84e99965160 < c2fceb59bbda16468bda82b002383bff59de89ab | c2fceb59bbda16468bda82b002383bff59de89ab |
| linux | linux_kernel | >= 0 < 5.10.191-1 | 5.10.191-1 |
| linux | linux_kernel | >= 0 < 6.1.52-1 | 6.1.52-1 |
| linux | linux_kernel | >= 0 < 6.4.11-1 | 6.4.11-1 |
| linux | linux_kernel | >= 0 < 6.4.11-1 | 6.4.11-1 |
| linux | linux_kernel | >= 0 < 5.10.190 | 5.10.190 |
| linux | linux_kernel | >= 5.11.0 < 5.15.124 | 5.15.124 |
| linux | linux_kernel | >= 5.16.0 < 6.1.43 | 6.1.43 |
| linux | linux_kernel | >= 6.0.0 < 6.4.8 | 6.4.8 |
CVSS provenance
nvdv3.18.8HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
vendor_redhat5.3MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
OSV
CVE-2023-54092: In the Linux kernel, the following vulnerability has been resolved: KVM: s390: pv: fix index value of replaced ASCE The index field of the struct page
osv·2025-12-24
CVE-2023-54092 CVE-2023-54092: In the Linux kernel, the following vulnerability has been resolved: KVM: s390: pv: fix index value of replaced ASCE The index field of the struct page
In the Linux kernel, the following vulnerability has been resolved: KVM: s390: pv: fix index value of replaced ASCE The index field of the struct page corresponding to a guest ASCE should be 0. When replacing the ASCE in s390_replace_asce(), the index of the new ASCE should also be set to 0. Having the wrong index might lead to the wrong addresses being passed around when notifying pte invalidations, and eventually to validity intercepts (VM crash) if the prefix gets unmapped and the notifier gets called with the wrong address.
GHSA
GHSA-g59x-v7cp-wpr9: In the Linux kernel, the following vulnerability has been resolved:
KVM: s390: pv: fix index value of replaced ASCE
The index field of the struct pa
ghsa_unreviewed·2025-12-24
CVE-2023-54092 GHSA-g59x-v7cp-wpr9: In the Linux kernel, the following vulnerability has been resolved:
KVM: s390: pv: fix index value of replaced ASCE
The index field of the struct pa
In the Linux kernel, the following vulnerability has been resolved:
KVM: s390: pv: fix index value of replaced ASCE
The index field of the struct page corresponding to a guest ASCE should
be 0. When replacing the ASCE in s390_replace_asce(), the index of the
new ASCE should also be set to 0.
Having the wrong index might lead to the wrong addresses being passed
around when notifying pte invalidations, and eventually to validity
intercepts (VM crash) if the prefix gets unmapped and the notifier gets
called with the wrong address.
OSV
KVM: s390: pv: fix index value of replaced ASCE
osv·2025-12-24
CVE-2023-54092 KVM: s390: pv: fix index value of replaced ASCE
KVM: s390: pv: fix index value of replaced ASCE
In the Linux kernel, the following vulnerability has been resolved:
KVM: s390: pv: fix index value of replaced ASCE
The index field of the struct page corresponding to a guest ASCE should
be 0. When replacing the ASCE in s390_replace_asce(), the index of the
new ASCE should also be set to 0.
Having the wrong index might lead to the wrong addresses being passed
around when notifying pte invalidations, and eventually to validity
intercepts (VM crash) if the prefix gets unmapped and the notifier gets
called with the wrong address.
Red Hat
kernel: KVM: s390: pv: fix index value of replaced ASCE
vendor_redhat·2025-12-24·CVSS 5.3
CVE-2023-54092 [MEDIUM] CWE-1285 kernel: KVM: s390: pv: fix index value of replaced ASCE
kernel: KVM: s390: pv: fix index value of replaced ASCE
In the Linux kernel, the following vulnerability has been resolved:
KVM: s390: pv: fix index value of replaced ASCE
The index field of the struct page corresponding to a guest ASCE should
be 0. When replacing the ASCE in s390_replace_asce(), the index of the
new ASCE should also be set to 0.
Having the wrong index might lead to the wrong addresses being passed
around when notifying pte invalidations, and eventually to validity
intercepts (VM crash) if the prefix gets unmapped and the notifier gets
called with the wrong address.
Package: kernel (Red Hat Enterprise Linux 10) - Not affected
Package: kernel (Red Hat Enterprise Linux 6) - Not affected
Package: kernel (Red Hat Enterprise Linux 7) - Not affected
Package: kernel-rt (Red
Debian
CVE-2023-54092: linux - In the Linux kernel, the following vulnerability has been resolved: KVM: s390: ...
vendor_debian·2023
CVE-2023-54092 CVE-2023-54092: linux - In the Linux kernel, the following vulnerability has been resolved: KVM: s390: ...
In the Linux kernel, the following vulnerability has been resolved: KVM: s390: pv: fix index value of replaced ASCE The index field of the struct page corresponding to a guest ASCE should be 0. When replacing the ASCE in s390_replace_asce(), the index of the new ASCE should also be set to 0. Having the wrong index might lead to the wrong addresses being passed around when notifying pte invalidations, and eventually to validity intercepts (VM crash) if the prefix gets unmapped and the notifier gets called with the wrong address.
Scope: local
bookworm: resolved (fixed in 6.1.52-1)
bullseye: resolved (fixed in 5.10.191-1)
forky: resolved (fixed in 6.4.11-1)
sid: resolved (fixed in 6.4.11-1)
trixie: resolved (fixed in 6.4.11-1)
No detection rules found.
No public exploits indexed.
Wiz
CVE-2023-54092 Impact, Exploitability, and Mitigation Steps | Wiz
blogs_wiz
CVE-2023-54092 CVE-2023-54092 Impact, Exploitability, and Mitigation Steps | Wiz
## CVE-2023-54092 :
Linux Kernel vulnerability analysis and mitigation
In the Linux kernel, the following vulnerability has been resolved:
KVM: s390: pv: fix index value of replaced ASCE
The index field of the struct page corresponding to a guest ASCE should
be 0. When replacing the ASCE in s390_replace_asce(), the index of the
new ASCE should also be set to 0.
Having the wrong index might lead to the wrong addresses being passed
around when notifying pte invalidations, and eventually to validity
intercepts (VM crash) if the prefix gets unmapped and the notifier gets
called with the wrong address.
Source : NVD
Published December 24, 2025
CNA Score N/A
Affected Technologies
Linux Kernel
Linux Debian
Has Public Exploit No
Has CISA KEV Exploit No
CISA KEV Release Date N/A
CISA
Bugzilla
CVE-2023-54092 kernel: KVM: s390: pv: fix index value of replaced ASCE
bugzilla·2025-12-24
CVE-2023-54092 [MEDIUM] CVE-2023-54092 kernel: KVM: s390: pv: fix index value of replaced ASCE
CVE-2023-54092 kernel: KVM: s390: pv: fix index value of replaced ASCE
In the Linux kernel, the following vulnerability has been resolved:
KVM: s390: pv: fix index value of replaced ASCE
The index field of the struct page corresponding to a guest ASCE should
be 0. When replacing the ASCE in s390_replace_asce(), the index of the
new ASCE should also be set to 0.
Having the wrong index might lead to the wrong addresses being passed
around when notifying pte invalidations, and eventually to validity
intercepts (VM crash) if the prefix gets unmapped and the notifier gets
called with the wrong address.
Discussion:
Upstream advisory:
https://lore.kernel.org/linux-cve-announce/2025122407-CVE-2023-54092-91ac@gregkh/T
https://git.kernel.org/stable/c/017f686bcb536ff23d49c143fdf9d1fd89a9a924https://git.kernel.org/stable/c/49a2686adddebe1ae76b4d368383208656ef6606https://git.kernel.org/stable/c/8e635da0e0d3cb45e32fa79b36218fb98281bc10https://git.kernel.org/stable/c/c2fceb59bbda16468bda82b002383bff59de89abhttps://git.kernel.org/stable/c/f1c7a776338f2ac5e34da40e58fe9f33ea390a5e
2025-12-24
Published