PT-2025-41107 · Linux+2 · Linux Kernel+2
Published
2023-08-03
·
Updated
2025-11-28
·
CVE-2023-53663
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
The Linux kernel contains a flaw within the KVM component related to nested TSC scaling support in nSVM. Instead of asserting that TSC scaling is exposed to L1 if L1's MSR AMD64 TSC RATIO has diverged from KVM's default, the code now checks for this support. Userspace can trigger a warning by writing to the MSR and then updating guest CPUID to hide the feature before KVM RUN. Specifically, manipulating KVM's state test selftest can cause an endless loop of warnings. The issue resides in the
nested vmcb02 prepare control() function within the arch/x86/kvm/svm/nested.c file.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Assertion Failure
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Linux Kernel
Red Hat
Suse