CVE-2023-52639: KVM: s390: vsie: fix race during shadow creation

Q: What is the severity of CVE-2023-52639?

CVE-2023-52639 has a high severity due to its potential to cause crashes in the Linux kernel.

Q: How do I fix CVE-2023-52639?

To fix CVE-2023-52639, update the kernel to version 6.1.82 or higher from Red Hat or install the patched versions 6.1.123-1, 6.1.128-1, or 6.12.12-1 from Debian.

Q: Which versions of the Linux kernel are affected by CVE-2023-52639?

CVE-2023-52639 affects various versions of the Linux kernel prior to 6.1.82 and several others as listed.

Q: Is CVE-2023-52639 specific to a particular platform?

Yes, CVE-2023-52639 specifically affects the KVM component of the Linux kernel on s390 platforms.

Q: What are the potential consequences of not addressing CVE-2023-52639?

Failing to address CVE-2023-52639 may result in system instability and crashes during shadow creation in KVM environments.

Published Apr 3, 2024

Updated

In the Linux kernel, the following vulnerability has been resolved:

KVM: s390: vsie: fix race during shadow creation

Right now it is possible to see gmap->private being zero in kvms390vsiegmapnotifier resulting in a crash. This is due to the fact that we add gmap->private == kvm after creation:

static int acquiregmapshadow(struct kvmvcpu vcpu, struct vsiepage vsiepage) { [...] gmap = gmapshadow(vcpu->arch.gmap, asce, edat); if (ISERR(gmap)) return PTRERR(gmap); gmap->private = vcpu->kvm;

Let children inherit the private field of the parent.

Other sources

In the Linux kernel, the following vulnerability has been resolved:

KVM: s390: vsie: fix race during shadow creation

The Linux kernel CVE team has assigned CVE-2023-52639 to this issue.

Upstream advisory: https://lore.kernel.org/linux-cve-announce/2024040335-CVE-2023-52639-5b67@gregkh/T

— Red Hat

Affected Software

173 affected componentsFixes available

Linux Linux kernel>=4.8<6.1.82

Linux Linux kernel>=6.2<6.6.22

Linux Linux kernel>=6.7<6.7.6

Linux Linux kernel=6.8-rc1

Linux Linux kernel=6.8-rc2

Linux Linux kernel=6.8-rc3

debian/linux<=5.10.223-1, <=5.10.234-1

6.1.129-16.1.135-16.12.25-16.12.27-1

redhat/kernel<6.1.82

6.1.82

redhat/kernel<6.6.22

6.6.22

redhat/kernel<6.7.6

6.7.6

redhat/kernel<6.8

6.8

ubuntu/linux-azure<4.15.0-1183.198~14.04.1

4.15.0-1183.198~14.04.1

ubuntu/linux-aws-hwe<4.15.0-1175.188~16.04.1

4.15.0-1175.188~16.04.1

ubuntu/linux-azure<4.15.0-1183.198~16.04.1

4.15.0-1183.198~16.04.1

ubuntu/linux-gcp<4.15.0-1168.185~16.04.1

4.15.0-1168.185~16.04.1

ubuntu/linux-hwe<4.15.0-231.243~16.04.1

4.15.0-231.243~16.04.1

ubuntu/linux-oracle<4.15.0-1137.148~16.04.1

4.15.0-1137.148~16.04.1

ubuntu/linux-hwe-edge*

ubuntu/linux<4.15.0-231.243

4.15.0-231.243

ubuntu/linux-aws<4.15.0-1175.188

4.15.0-1175.188

ubuntu/linux-aws-5.0*

ubuntu/linux-aws-5.3*

ubuntu/linux-aws-5.4<5.4.0-1136.146~18.04.1

5.4.0-1136.146~18.04.1

ubuntu/linux-azure*

ubuntu/linux-azure-4.15<4.15.0-1183.198

4.15.0-1183.198

ubuntu/linux-azure-5.3*

ubuntu/linux-azure-5.4<5.4.0-1142.149~18.04.1

5.4.0-1142.149~18.04.1

ubuntu/linux-azure-edge*

ubuntu/linux-gcp*

ubuntu/linux-gcp-4.15<4.15.0-1168.185

4.15.0-1168.185

ubuntu/linux-gcp-5.3*

ubuntu/linux-gcp-5.4<5.4.0-1140.149~18.04.1

5.4.0-1140.149~18.04.1

ubuntu/linux-gke-4.15*

ubuntu/linux-gke-5.4*

ubuntu/linux-gkeop-5.4*

ubuntu/linux-hwe*

ubuntu/linux-hwe-5.4<5.4.0-202.222~18.04.1

5.4.0-202.222~18.04.1

ubuntu/linux-hwe-edge*

ubuntu/linux-ibm-5.4<5.4.0-1083.88~18.04.1

5.4.0-1083.88~18.04.1

ubuntu/linux-kvm<4.15.0-1158.163

4.15.0-1158.163

ubuntu/linux-oem*

ubuntu/linux-oracle<4.15.0-1137.148

4.15.0-1137.148

ubuntu/linux-oracle-5.0*

ubuntu/linux-oracle-5.3*

ubuntu/linux-oracle-5.4<5.4.0-1135.144~18.04.1

5.4.0-1135.144~18.04.1

ubuntu/linux-raspi-5.4<5.4.0-1120.132~18.04.1

5.4.0-1120.132~18.04.1

ubuntu/linux-aws-fips<4.15.0-2113.119

4.15.0-2113.119

ubuntu/linux-azure-fips<4.15.0-2092.98

4.15.0-2092.98

ubuntu/linux-fips<4.15.0-1129.140

4.15.0-1129.140

ubuntu/linux-gcp-fips<4.15.0-2076.81

4.15.0-2076.81

ubuntu/linux-aws-fips*

ubuntu/linux-azure-fips*

ubuntu/linux-fips*

ubuntu/linux-gcp-fips*

ubuntu/linux<5.4.0-202.222

5.4.0-202.222

ubuntu/linux-aws<5.4.0-1136.146

5.4.0-1136.146

ubuntu/linux-aws-5.15<5.15.0-1073.79~20.04.1

5.15.0-1073.79~20.04.1

ubuntu/linux-azure<5.4.0-1142.149

5.4.0-1142.149

ubuntu/linux-azure-5.15<5.15.0-1078.87~20.04.1

5.15.0-1078.87~20.04.1

ubuntu/linux-bluefield<5.4.0-1096.103

5.4.0-1096.103

ubuntu/linux-gcp<5.4.0-1140.149

5.4.0-1140.149

ubuntu/linux-gcp-5.15<5.15.0-1072.80~20.04.1

5.15.0-1072.80~20.04.1

ubuntu/linux-hwe-5.15<5.15.0-127.137~20.04.1

5.15.0-127.137~20.04.1

ubuntu/linux-ibm<5.4.0-1083.88

5.4.0-1083.88

ubuntu/linux-ibm-5.15<5.15.0-1066.69~20.04.1

5.15.0-1066.69~20.04.1

ubuntu/linux-intel-iotg-5.15<5.15.0-1071.77~20.04.1

5.15.0-1071.77~20.04.1

ubuntu/linux-iot<5.4.0-1045.46

5.4.0-1045.46

ubuntu/linux-kvm<5.4.0-1124.132

5.4.0-1124.132

ubuntu/linux-lowlatency-hwe-5.15<5.15.0-127.137~20.04.1

5.15.0-127.137~20.04.1

ubuntu/linux-nvidia-tegra-5.15<5.15.0-1032.32~20.04.1

5.15.0-1032.32~20.04.1

ubuntu/linux-oracle<5.4.0-1135.144

5.4.0-1135.144

ubuntu/linux-oracle-5.15<5.15.0-1071.77~20.04.1

5.15.0-1071.77~20.04.1

ubuntu/linux-raspi<5.4.0-1120.132

5.4.0-1120.132

ubuntu/linux-riscv-5.15<5.15.0-1069.73~20.04.1

5.15.0-1069.73~20.04.1

ubuntu/linux-xilinx-zynqmp<5.4.0-1055.59

5.4.0-1055.59

ubuntu/linux-aws-5.11*

ubuntu/linux-aws-5.13*

ubuntu/linux-aws-5.8*

ubuntu/linux-azure-5.11*

ubuntu/linux-azure-5.13*

ubuntu/linux-azure-5.8*

ubuntu/linux-azure-fde*

ubuntu/linux-gcp-5.11*

ubuntu/linux-gcp-5.13*

ubuntu/linux-gcp-5.8*

ubuntu/linux-gke*

ubuntu/linux-gke-5.15*

ubuntu/linux-gkeop*

ubuntu/linux-gkeop-5.15*

ubuntu/linux-hwe-5.11*

ubuntu/linux-hwe-5.13*

ubuntu/linux-hwe-5.8*

ubuntu/linux-intel-5.13*

ubuntu/linux-oem-5.10*

ubuntu/linux-oem-5.13*

ubuntu/linux-oem-5.6*

ubuntu/linux-oracle-5.11*

ubuntu/linux-oracle-5.13*

ubuntu/linux-oracle-5.8*

ubuntu/linux-raspi2*

ubuntu/linux-riscv*

ubuntu/linux-riscv-5.11*

ubuntu/linux-riscv-5.8*

ubuntu/linux-aws-fips<5.4.0-1136.146+fips1

5.4.0-1136.146+fips1

ubuntu/linux-azure-fips<5.4.0-1142.149+fips1

5.4.0-1142.149+fips1

ubuntu/linux-fips<5.4.0-1110.120

5.4.0-1110.120

ubuntu/linux-gcp-fips<5.4.0-1140.149+fips1

5.4.0-1140.149+fips1

ubuntu/linux-aws-fips*

ubuntu/linux-azure-fips*

ubuntu/linux-fips*

ubuntu/linux-gcp-fips*

ubuntu/linux<5.15.0-127.137

5.15.0-127.137

ubuntu/linux-allwinner-5.19*

ubuntu/linux-aws<5.15.0-1073.79

5.15.0-1073.79

ubuntu/linux-aws-5.19*

ubuntu/linux-aws-6.2*

ubuntu/linux-aws-6.5*

ubuntu/linux-azure<5.15.0-1078.87

5.15.0-1078.87

ubuntu/linux-azure-5.19*

ubuntu/linux-azure-6.2*

ubuntu/linux-azure-6.5*

ubuntu/linux-azure-fde<5.15.0-1078.87.1

5.15.0-1078.87.1

ubuntu/linux-azure-fde-5.19*

ubuntu/linux-azure-fde-6.2*

ubuntu/linux-gcp<5.15.0-1072.80

5.15.0-1072.80

ubuntu/linux-gcp-5.19*

ubuntu/linux-gcp-6.2*

ubuntu/linux-gcp-6.5*

ubuntu/linux-gke<5.15.0-1070.76

5.15.0-1070.76

ubuntu/linux-gkeop<5.15.0-1056.63

5.15.0-1056.63

ubuntu/linux-hwe-5.19*

ubuntu/linux-hwe-6.2*

ubuntu/linux-hwe-6.5*

ubuntu/linux-ibm<5.15.0-1066.69

5.15.0-1066.69

ubuntu/linux-intel-iotg<5.15.0-1071.77

5.15.0-1071.77

ubuntu/linux-kvm<5.15.0-1070.75

5.15.0-1070.75

ubuntu/linux-lowlatency<5.15.0-127.137

5.15.0-127.137

ubuntu/linux-lowlatency-hwe-5.19*

ubuntu/linux-lowlatency-hwe-6.2*

ubuntu/linux-lowlatency-hwe-6.5*

ubuntu/linux-nvidia<5.15.0-1068.69

5.15.0-1068.69

ubuntu/linux-nvidia-6.2*

ubuntu/linux-nvidia-6.5*

ubuntu/linux-nvidia-tegra<5.15.0-1032.32

5.15.0-1032.32

ubuntu/linux-nvidia-tegra-igx<5.15.0-1020.20

5.15.0-1020.20

ubuntu/linux-oem-5.17*

ubuntu/linux-oem-6.0*

ubuntu/linux-oem-6.1*

ubuntu/linux-oem-6.5*

ubuntu/linux-oracle<5.15.0-1071.77

5.15.0-1071.77

ubuntu/linux-oracle-6.5*

ubuntu/linux-raspi<5.15.0-1066.69

5.15.0-1066.69

ubuntu/linux-realtime*

ubuntu/linux-riscv*

ubuntu/linux-riscv-5.19*

ubuntu/linux-riscv-6.5*

ubuntu/linux-starfive-5.19*

ubuntu/linux-starfive-6.2*

ubuntu/linux-starfive-6.5*

ubuntu/linux-xilinx-zynqmp<5.15.0-1039.43

5.15.0-1039.43

ubuntu/linux-bluefield<5.15.0-1057.59

5.15.0-1057.59

ubuntu/linux-intel-iot-realtime<5.15.0-1066.68

5.15.0-1066.68

ubuntu/linux-realtime<5.15.0-1074.82

5.15.0-1074.82

ubuntu/linux-aws-fips*

ubuntu/linux-azure-fips*

ubuntu/linux-fips*

ubuntu/linux-gcp-fips*

ubuntu/linux-aws-fips<5.15.0-1073.79+fips1

5.15.0-1073.79+fips1

ubuntu/linux-azure-fips<5.15.0-1078.87+fips1

5.15.0-1078.87+fips1

ubuntu/linux-fips<5.15.0-127.137+fips1

5.15.0-127.137+fips1

ubuntu/linux-gcp-fips<5.15.0-1072.80+fips1

5.15.0-1072.80+fips1

ubuntu/linux-raspi-realtime<6.8.0-2001.1

6.8.0-2001.1

ubuntu/linux-vmware*

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade debian/linux to a version that resolves this vulnerability.
Fixed in 6.1.129-1Fixed in 6.1.135-1Fixed in 6.12.25-1Fixed in 6.12.27-1
Upgrade
Upgrade redhat/kernel to a version that resolves this vulnerability.
Fixed in 6.1.82
Upgrade
Upgrade redhat/kernel to a version that resolves this vulnerability.
Fixed in 6.6.22
Upgrade
Upgrade redhat/kernel to a version that resolves this vulnerability.
Fixed in 6.7.6
Upgrade
Upgrade redhat/kernel to a version that resolves this vulnerability.
Fixed in 6.8
Upgrade
Upgrade ubuntu/linux-azure to a version that resolves this vulnerability.
Fixed in 4.15.0-1183.198~14.04.1
Upgrade
Upgrade ubuntu/linux-aws-hwe to a version that resolves this vulnerability.
Fixed in 4.15.0-1175.188~16.04.1
Upgrade
Upgrade ubuntu/linux-azure to a version that resolves this vulnerability.
Fixed in 4.15.0-1183.198~16.04.1
Upgrade
Upgrade ubuntu/linux-gcp to a version that resolves this vulnerability.
Fixed in 4.15.0-1168.185~16.04.1
Upgrade
Upgrade ubuntu/linux-hwe to a version that resolves this vulnerability.
Fixed in 4.15.0-231.243~16.04.1
Upgrade
Upgrade ubuntu/linux-oracle to a version that resolves this vulnerability.
Fixed in 4.15.0-1137.148~16.04.1
Upgrade
Upgrade ubuntu/linux to a version that resolves this vulnerability.
Fixed in 4.15.0-231.243
Upgrade
Upgrade ubuntu/linux-aws to a version that resolves this vulnerability.
Fixed in 4.15.0-1175.188
Upgrade
Upgrade ubuntu/linux-aws-5.4 to a version that resolves this vulnerability.
Fixed in 5.4.0-1136.146~18.04.1
Upgrade
Upgrade ubuntu/linux-azure-4.15 to a version that resolves this vulnerability.
Fixed in 4.15.0-1183.198
Upgrade
Upgrade ubuntu/linux-azure-5.4 to a version that resolves this vulnerability.
Fixed in 5.4.0-1142.149~18.04.1
Upgrade
Upgrade ubuntu/linux-gcp-4.15 to a version that resolves this vulnerability.
Fixed in 4.15.0-1168.185
Upgrade
Upgrade ubuntu/linux-gcp-5.4 to a version that resolves this vulnerability.
Fixed in 5.4.0-1140.149~18.04.1
Upgrade
Upgrade ubuntu/linux-hwe-5.4 to a version that resolves this vulnerability.
Fixed in 5.4.0-202.222~18.04.1
Upgrade
Upgrade ubuntu/linux-ibm-5.4 to a version that resolves this vulnerability.
Fixed in 5.4.0-1083.88~18.04.1
Upgrade
Upgrade ubuntu/linux-kvm to a version that resolves this vulnerability.
Fixed in 4.15.0-1158.163
Upgrade
Upgrade ubuntu/linux-oracle to a version that resolves this vulnerability.
Fixed in 4.15.0-1137.148
Upgrade
Upgrade ubuntu/linux-oracle-5.4 to a version that resolves this vulnerability.
Fixed in 5.4.0-1135.144~18.04.1
Upgrade
Upgrade ubuntu/linux-raspi-5.4 to a version that resolves this vulnerability.
Fixed in 5.4.0-1120.132~18.04.1
Upgrade
Upgrade ubuntu/linux-aws-fips to a version that resolves this vulnerability.
Fixed in 4.15.0-2113.119
Upgrade
Upgrade ubuntu/linux-azure-fips to a version that resolves this vulnerability.
Fixed in 4.15.0-2092.98
Upgrade
Upgrade ubuntu/linux-fips to a version that resolves this vulnerability.
Fixed in 4.15.0-1129.140
Upgrade
Upgrade ubuntu/linux-gcp-fips to a version that resolves this vulnerability.
Fixed in 4.15.0-2076.81
Upgrade
Upgrade ubuntu/linux to a version that resolves this vulnerability.
Fixed in 5.4.0-202.222
Upgrade
Upgrade ubuntu/linux-aws to a version that resolves this vulnerability.
Fixed in 5.4.0-1136.146
Upgrade
Upgrade ubuntu/linux-aws-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1073.79~20.04.1
Upgrade
Upgrade ubuntu/linux-azure to a version that resolves this vulnerability.
Fixed in 5.4.0-1142.149
Upgrade
Upgrade ubuntu/linux-azure-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1078.87~20.04.1
Upgrade
Upgrade ubuntu/linux-bluefield to a version that resolves this vulnerability.
Fixed in 5.4.0-1096.103
Upgrade
Upgrade ubuntu/linux-gcp to a version that resolves this vulnerability.
Fixed in 5.4.0-1140.149
Upgrade
Upgrade ubuntu/linux-gcp-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1072.80~20.04.1
Upgrade
Upgrade ubuntu/linux-hwe-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-127.137~20.04.1
Upgrade
Upgrade ubuntu/linux-ibm to a version that resolves this vulnerability.
Fixed in 5.4.0-1083.88
Upgrade
Upgrade ubuntu/linux-ibm-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1066.69~20.04.1
Upgrade
Upgrade ubuntu/linux-intel-iotg-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1071.77~20.04.1
Upgrade
Upgrade ubuntu/linux-iot to a version that resolves this vulnerability.
Fixed in 5.4.0-1045.46
Upgrade
Upgrade ubuntu/linux-kvm to a version that resolves this vulnerability.
Fixed in 5.4.0-1124.132
Upgrade
Upgrade ubuntu/linux-lowlatency-hwe-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-127.137~20.04.1
Upgrade
Upgrade ubuntu/linux-nvidia-tegra-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1032.32~20.04.1
Upgrade
Upgrade ubuntu/linux-oracle to a version that resolves this vulnerability.
Fixed in 5.4.0-1135.144
Upgrade
Upgrade ubuntu/linux-oracle-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1071.77~20.04.1
Upgrade
Upgrade ubuntu/linux-raspi to a version that resolves this vulnerability.
Fixed in 5.4.0-1120.132
Upgrade
Upgrade ubuntu/linux-riscv-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1069.73~20.04.1
Upgrade
Upgrade ubuntu/linux-xilinx-zynqmp to a version that resolves this vulnerability.
Fixed in 5.4.0-1055.59
Upgrade
Upgrade ubuntu/linux-aws-fips to a version that resolves this vulnerability.
Fixed in 5.4.0-1136.146+fips1
Upgrade
Upgrade ubuntu/linux-azure-fips to a version that resolves this vulnerability.
Fixed in 5.4.0-1142.149+fips1
Upgrade
Upgrade ubuntu/linux-fips to a version that resolves this vulnerability.
Fixed in 5.4.0-1110.120
Upgrade
Upgrade ubuntu/linux-gcp-fips to a version that resolves this vulnerability.
Fixed in 5.4.0-1140.149+fips1
Upgrade
Upgrade ubuntu/linux to a version that resolves this vulnerability.
Fixed in 5.15.0-127.137
Upgrade
Upgrade ubuntu/linux-aws to a version that resolves this vulnerability.
Fixed in 5.15.0-1073.79
Upgrade
Upgrade ubuntu/linux-azure to a version that resolves this vulnerability.
Fixed in 5.15.0-1078.87
Upgrade
Upgrade ubuntu/linux-azure-fde to a version that resolves this vulnerability.
Fixed in 5.15.0-1078.87.1
Upgrade
Upgrade ubuntu/linux-gcp to a version that resolves this vulnerability.
Fixed in 5.15.0-1072.80
Upgrade
Upgrade ubuntu/linux-gke to a version that resolves this vulnerability.
Fixed in 5.15.0-1070.76
Upgrade
Upgrade ubuntu/linux-gkeop to a version that resolves this vulnerability.
Fixed in 5.15.0-1056.63
Upgrade
Upgrade ubuntu/linux-ibm to a version that resolves this vulnerability.
Fixed in 5.15.0-1066.69
Upgrade
Upgrade ubuntu/linux-intel-iotg to a version that resolves this vulnerability.
Fixed in 5.15.0-1071.77
Upgrade
Upgrade ubuntu/linux-kvm to a version that resolves this vulnerability.
Fixed in 5.15.0-1070.75
Upgrade
Upgrade ubuntu/linux-lowlatency to a version that resolves this vulnerability.
Fixed in 5.15.0-127.137
Upgrade
Upgrade ubuntu/linux-nvidia to a version that resolves this vulnerability.
Fixed in 5.15.0-1068.69
Upgrade
Upgrade ubuntu/linux-nvidia-tegra to a version that resolves this vulnerability.
Fixed in 5.15.0-1032.32
Upgrade
Upgrade ubuntu/linux-nvidia-tegra-igx to a version that resolves this vulnerability.
Fixed in 5.15.0-1020.20
Upgrade
Upgrade ubuntu/linux-oracle to a version that resolves this vulnerability.
Fixed in 5.15.0-1071.77
Upgrade
Upgrade ubuntu/linux-raspi to a version that resolves this vulnerability.
Fixed in 5.15.0-1066.69
Upgrade
Upgrade ubuntu/linux-xilinx-zynqmp to a version that resolves this vulnerability.
Fixed in 5.15.0-1039.43
Upgrade
Upgrade ubuntu/linux-bluefield to a version that resolves this vulnerability.
Fixed in 5.15.0-1057.59
Upgrade
Upgrade ubuntu/linux-intel-iot-realtime to a version that resolves this vulnerability.
Fixed in 5.15.0-1066.68
Upgrade
Upgrade ubuntu/linux-realtime to a version that resolves this vulnerability.
Fixed in 5.15.0-1074.82
Upgrade
Upgrade ubuntu/linux-aws-fips to a version that resolves this vulnerability.
Fixed in 5.15.0-1073.79+fips1
Upgrade
Upgrade ubuntu/linux-azure-fips to a version that resolves this vulnerability.
Fixed in 5.15.0-1078.87+fips1
Upgrade
Upgrade ubuntu/linux-fips to a version that resolves this vulnerability.
Fixed in 5.15.0-127.137+fips1
Upgrade
Upgrade ubuntu/linux-gcp-fips to a version that resolves this vulnerability.
Fixed in 5.15.0-1072.80+fips1
Upgrade
Upgrade ubuntu/linux-raspi-realtime to a version that resolves this vulnerability.
Fixed in 6.8.0-2001.1

Event History

Apr 3, 2024

CVE Published

via MITRE·02:54 PM

Data Sourced

via MITRE·02:54 PM

Description

Data Sourced

via OSV·03:15 PM

DescriptionSeverityAffected Software

Data Sourced

via Red Hat·09:59 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of CVE-2023-52639?

CVE-2023-52639 has a high severity due to its potential to cause crashes in the Linux kernel.

How do I fix CVE-2023-52639?

To fix CVE-2023-52639, update the kernel to version 6.1.82 or higher from Red Hat or install the patched versions 6.1.123-1, 6.1.128-1, or 6.12.12-1 from Debian.

Which versions of the Linux kernel are affected by CVE-2023-52639?

CVE-2023-52639 affects various versions of the Linux kernel prior to 6.1.82 and several others as listed.

Is CVE-2023-52639 specific to a particular platform?

Yes, CVE-2023-52639 specifically affects the KVM component of the Linux kernel on s390 platforms.

What are the potential consequences of not addressing CVE-2023-52639?

Failing to address CVE-2023-52639 may result in system instability and crashes during shadow creation in KVM environments.

CVE-2023-52639: KVM: s390: vsie: fix race during shadow creation

Other sources

Affected Software

Remediation

Event History

Frequently Asked Questions

What is the severity of CVE-2023-52639?

How do I fix CVE-2023-52639?

Which versions of the Linux kernel are affected by CVE-2023-52639?

Is CVE-2023-52639 specific to a particular platform?

What are the potential consequences of not addressing CVE-2023-52639?

Company

Resources

Contact