CVE-2023-54092
High
Description
In the Linux kernel, the following vulnerability has been resolved: KVM: s390: pv: fix index value of replaced ASCE The index field of the struct page corresponding to a guest ASCE should be 0. When replacing the ASCE in s390_replace_asce(), the index of the new ASCE should also be set to 0. Having the wrong index might lead to the wrong addresses being passed around when notifying pte invalidations, and eventually to validity intercepts (VM crash) if the prefix gets unmapped and the notifier gets called with the wrong address.
SeverityHigh
CVSS8.8
Exploit probability—
Product
Linux
PublishedDec 24, 2025
First seenDec 24, 2025
How to fix
Update
- Linux Linux8e635da0e0d3cb45e32fa79b36218fb98281bc10, 49a2686adddebe1ae76b4d368383208656ef6606, 017f686bcb536ff23d49c143fdf9d1fd89a9a924, f1c7a776338f2ac5e34da40e58fe9f33ea390a5e, c2fceb59bbda16468bda82b002383bff59de89ab, 5.10.190, 5.15.124, 5.19, 5.20 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | 9d216035d173214cd33712d67d89220ef2283ebf ≤ v < 8e635da0e0d3cb45e32fa79b36218fb98281bc10, 81ea65c9aefe100a9ace3082649bd84ae7dd9764 ≤ v < 49a2686adddebe1ae76b4d368383208656ef6606, faa2f72cb3569256480c5540d242c84e99965160 ≤ v < 017f686bcb536ff23d49c143fdf9d1fd89a9a924, faa2f72cb3569256480c5540d242c84e99965160 ≤ v < f1c7a776338f2ac5e34da40e58fe9f33ea390a5e, faa2f72cb3569256480c5540d242c84e99965160 ≤ v < c2fceb59bbda16468bda82b002383bff59de89ab, b5477f53e1d4de6191f50748a027251b14952eeb, 63c71e83d5b6ab8adb5fcebef977052048016957, 5.10.137 ≤ v < 5.10.190, 5.15.61 ≤ v < 5.15.124, 5.18.18 ≤ v < 5.19, 5.19.2 ≤ v < 5.20, 6.0 | 8e635da0e0d3cb45e32fa79b36218fb98281bc10, 49a2686adddebe1ae76b4d368383208656ef6606, 017f686bcb536ff23d49c143fdf9d1fd89a9a924, f1c7a776338f2ac5e34da40e58fe9f33ea390a5e, c2fceb59bbda16468bda82b002383bff59de89ab, 5.10.190, 5.15.124, 5.19, 5.20 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.