CVE-2023-54172 — Improper Handling of Missing Special Element in Linux
Severity
3.3LOW
No vectorEPSS
0.0%
top 93.24%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedDec 30
Description
In the Linux kernel, the following vulnerability has been resolved:
x86/hyperv: Disable IBT when hypercall page lacks ENDBR instruction
On hardware that supports Indirect Branch Tracking (IBT), Hyper-V VMs
with ConfigVersion 9.3 or later support IBT in the guest. However,
current versions of Hyper-V have a bug in that there's not an ENDBR64
instruction at the beginning of the hypercall page. Since hypercalls are
made with an indirect call to the hypercall page, all hypercall attempts
fail with…
Affected Packages4 packages
▶CVEListV5linux/linux991625f3dd2cbc4b787deb0213e2bcf8fa264b21 — 98cccbd0a19a161971bc7f7feb10577adc62c400+3
🔴Vulnerability Details
3OSV▶
CVE-2023-54172: In the Linux kernel, the following vulnerability has been resolved: x86/hyperv: Disable IBT when hypercall page lacks ENDBR instruction On hardware th↗2025-12-30
GHSA▶
GHSA-3fcf-v62x-cm7w: In the Linux kernel, the following vulnerability has been resolved:
x86/hyperv: Disable IBT when hypercall page lacks ENDBR instruction
On hardware↗2025-12-30