Unrated severityNVD Advisory· Published Apr 10, 2023· Updated Mar 19, 2025
CVE-2023-30456
CVE-2023-30456
Description
An issue was discovered in arch/x86/kvm/vmx/nested.c in the Linux kernel before 6.2.8. nVMX on x86_64 lacks consistency checks for CR0 and CR4.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
118- Range: <6.2.8
- osv-coords116 versionspkg:rpm/almalinux/bpftoolpkg:rpm/almalinux/kernelpkg:rpm/almalinux/kernel-abi-stablelistspkg:rpm/almalinux/kernel-corepkg:rpm/almalinux/kernel-cross-headerspkg:rpm/almalinux/kernel-debugpkg:rpm/almalinux/kernel-debug-corepkg:rpm/almalinux/kernel-debug-develpkg:rpm/almalinux/kernel-debug-modulespkg:rpm/almalinux/kernel-debug-modules-extrapkg:rpm/almalinux/kernel-develpkg:rpm/almalinux/kernel-docpkg:rpm/almalinux/kernel-headerspkg:rpm/almalinux/kernel-modulespkg:rpm/almalinux/kernel-modules-extrapkg:rpm/almalinux/kernel-toolspkg:rpm/almalinux/kernel-tools-libspkg:rpm/almalinux/kernel-tools-libs-develpkg:rpm/almalinux/kernel-zfcpdumppkg:rpm/almalinux/kernel-zfcpdump-corepkg:rpm/almalinux/kernel-zfcpdump-develpkg:rpm/almalinux/kernel-zfcpdump-modulespkg:rpm/almalinux/kernel-zfcpdump-modules-extrapkg:rpm/almalinux/perfpkg:rpm/almalinux/python3-perfpkg:rpm/opensuse/dtb-aarch64&distro=openSUSE%20Leap%2015.4pkg:rpm/opensuse/dtb-aarch64&distro=openSUSE%20Leap%2015.5pkg:rpm/opensuse/kernel-64kb&distro=openSUSE%20Leap%2015.4pkg:rpm/opensuse/kernel-64kb&distro=openSUSE%20Leap%2015.5pkg:rpm/opensuse/kernel-azure&distro=openSUSE%20Leap%2015.4pkg:rpm/opensuse/kernel-azure&distro=openSUSE%20Leap%2015.5pkg:rpm/opensuse/kernel-debug&distro=openSUSE%20Leap%2015.4pkg:rpm/opensuse/kernel-debug&distro=openSUSE%20Leap%2015.5pkg:rpm/opensuse/kernel-default-base&distro=openSUSE%20Leap%2015.4pkg:rpm/opensuse/kernel-default-base&distro=openSUSE%20Leap%2015.5pkg:rpm/opensuse/kernel-default-base&distro=openSUSE%20Leap%20Micro%205.3pkg:rpm/opensuse/kernel-default&distro=openSUSE%20Leap%2015.4pkg:rpm/opensuse/kernel-default&distro=openSUSE%20Leap%2015.5pkg:rpm/opensuse/kernel-default&distro=openSUSE%20Leap%20Micro%205.3pkg:rpm/opensuse/kernel-docs&distro=openSUSE%20Leap%2015.4pkg:rpm/opensuse/kernel-docs&distro=openSUSE%20Leap%2015.5pkg:rpm/opensuse/kernel-kvmsmall&distro=openSUSE%20Leap%2015.4pkg:rpm/opensuse/kernel-kvmsmall&distro=openSUSE%20Leap%2015.5pkg:rpm/opensuse/kernel-obs-build&distro=openSUSE%20Leap%2015.4pkg:rpm/opensuse/kernel-obs-build&distro=openSUSE%20Leap%2015.5pkg:rpm/opensuse/kernel-obs-qa&distro=openSUSE%20Leap%2015.4pkg:rpm/opensuse/kernel-obs-qa&distro=openSUSE%20Leap%2015.5pkg:rpm/opensuse/kernel-rt_debug&distro=openSUSE%20Leap%2015.4pkg:rpm/opensuse/kernel-rt_debug&distro=openSUSE%20Leap%2015.5pkg:rpm/opensuse/kernel-rt&distro=openSUSE%20Leap%2015.4pkg:rpm/opensuse/kernel-rt&distro=openSUSE%20Leap%2015.5pkg:rpm/opensuse/kernel-rt&distro=openSUSE%20Leap%20Micro%205.3pkg:rpm/opensuse/kernel-source-azure&distro=openSUSE%20Leap%2015.4pkg:rpm/opensuse/kernel-source-azure&distro=openSUSE%20Leap%2015.5pkg:rpm/opensuse/kernel-source&distro=openSUSE%20Leap%2015.4pkg:rpm/opensuse/kernel-source&distro=openSUSE%20Leap%2015.5pkg:rpm/opensuse/kernel-source-rt&distro=openSUSE%20Leap%2015.4pkg:rpm/opensuse/kernel-source-rt&distro=openSUSE%20Leap%2015.5pkg:rpm/opensuse/kernel-syms-azure&distro=openSUSE%20Leap%2015.4pkg:rpm/opensuse/kernel-syms-azure&distro=openSUSE%20Leap%2015.5pkg:rpm/opensuse/kernel-syms&distro=openSUSE%20Leap%2015.4pkg:rpm/opensuse/kernel-syms&distro=openSUSE%20Leap%2015.5pkg:rpm/opensuse/kernel-syms-rt&distro=openSUSE%20Leap%2015.4pkg:rpm/opensuse/kernel-syms-rt&distro=openSUSE%20Leap%2015.5pkg:rpm/opensuse/kernel-zfcpdump&distro=openSUSE%20Leap%2015.4pkg:rpm/opensuse/kernel-zfcpdump&distro=openSUSE%20Leap%2015.5pkg:rpm/suse/kernel-64kb&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP4pkg:rpm/suse/kernel-64kb&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP5pkg:rpm/suse/kernel-azure&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Public%20Cloud%2015%20SP4pkg:rpm/suse/kernel-azure&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Public%20Cloud%2015%20SP5pkg:rpm/suse/kernel-default-base&distro=SUSE%20Linux%20Enterprise%20Micro%205.3pkg:rpm/suse/kernel-default-base&distro=SUSE%20Linux%20Enterprise%20Micro%205.4pkg:rpm/suse/kernel-default-base&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP4pkg:rpm/suse/kernel-default-base&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP5pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20High%20Availability%20Extension%2015%20SP4pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20High%20Availability%20Extension%2015%20SP5pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Live%20Patching%2015%20SP4pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Live%20Patching%2015%20SP5pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Micro%205.3pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Micro%205.4pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP4pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP5pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Legacy%2015%20SP4pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Legacy%2015%20SP5pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Workstation%20Extension%2015%20SP4pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Workstation%20Extension%2015%20SP5pkg:rpm/suse/kernel-docs&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Development%20Tools%2015%20SP4pkg:rpm/suse/kernel-docs&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Development%20Tools%2015%20SP5pkg:rpm/suse/kernel-livepatch-SLE15-SP4-RT_Update_8&distro=SUSE%20Linux%20Enterprise%20Live%20Patching%2015%20SP4pkg:rpm/suse/kernel-livepatch-SLE15-SP4_Update_13&distro=SUSE%20Linux%20Enterprise%20Live%20Patching%2015%20SP4pkg:rpm/suse/kernel-livepatch-SLE15-SP5-RT_Update_1&distro=SUSE%20Linux%20Enterprise%20Live%20Patching%2015%20SP5pkg:rpm/suse/kernel-livepatch-SLE15-SP5_Update_1&distro=SUSE%20Linux%20Enterprise%20Live%20Patching%2015%20SP5pkg:rpm/suse/kernel-obs-build&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Development%20Tools%2015%20SP4pkg:rpm/suse/kernel-obs-build&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Development%20Tools%2015%20SP5pkg:rpm/suse/kernel-rt_debug&distro=SUSE%20Real%20Time%20Module%2015%20SP4pkg:rpm/suse/kernel-rt_debug&distro=SUSE%20Real%20Time%20Module%2015%20SP5pkg:rpm/suse/kernel-rt&distro=SUSE%20Linux%20Enterprise%20Micro%205.3pkg:rpm/suse/kernel-rt&distro=SUSE%20Linux%20Enterprise%20Micro%205.4pkg:rpm/suse/kernel-rt&distro=SUSE%20Real%20Time%20Module%2015%20SP4pkg:rpm/suse/kernel-rt&distro=SUSE%20Real%20Time%20Module%2015%20SP5pkg:rpm/suse/kernel-source-azure&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Public%20Cloud%2015%20SP4pkg:rpm/suse/kernel-source-azure&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Public%20Cloud%2015%20SP5pkg:rpm/suse/kernel-source&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP4pkg:rpm/suse/kernel-source&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP5pkg:rpm/suse/kernel-source&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Development%20Tools%2015%20SP4pkg:rpm/suse/kernel-source&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Development%20Tools%2015%20SP5pkg:rpm/suse/kernel-source-rt&distro=SUSE%20Real%20Time%20Module%2015%20SP4pkg:rpm/suse/kernel-source-rt&distro=SUSE%20Real%20Time%20Module%2015%20SP5pkg:rpm/suse/kernel-syms-azure&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Public%20Cloud%2015%20SP4pkg:rpm/suse/kernel-syms-azure&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Public%20Cloud%2015%20SP5pkg:rpm/suse/kernel-syms&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Development%20Tools%2015%20SP4pkg:rpm/suse/kernel-syms&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Development%20Tools%2015%20SP5pkg:rpm/suse/kernel-syms-rt&distro=SUSE%20Real%20Time%20Module%2015%20SP4pkg:rpm/suse/kernel-syms-rt&distro=SUSE%20Real%20Time%20Module%2015%20SP5pkg:rpm/suse/kernel-zfcpdump&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP4pkg:rpm/suse/kernel-zfcpdump&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP5
< 4.18.0-513.5.1.el8_9+ 115 more
- (no CPE)range: < 4.18.0-513.5.1.el8_9
- (no CPE)range: < 4.18.0-513.5.1.el8_9
- (no CPE)range: < 4.18.0-513.5.1.el8_9
- (no CPE)range: < 4.18.0-513.5.1.el8_9
- (no CPE)range: < 4.18.0-513.5.1.el8_9
- (no CPE)range: < 4.18.0-513.5.1.el8_9
- (no CPE)range: < 4.18.0-513.5.1.el8_9
- (no CPE)range: < 4.18.0-513.5.1.el8_9
- (no CPE)range: < 4.18.0-513.5.1.el8_9
- (no CPE)range: < 4.18.0-513.5.1.el8_9
- (no CPE)range: < 4.18.0-513.5.1.el8_9
- (no CPE)range: < 4.18.0-513.5.1.el8_9
- (no CPE)range: < 4.18.0-513.5.1.el8_9
- (no CPE)range: < 4.18.0-513.5.1.el8_9
- (no CPE)range: < 4.18.0-513.5.1.el8_9
- (no CPE)range: < 4.18.0-513.5.1.el8_9
- (no CPE)range: < 4.18.0-513.5.1.el8_9
- (no CPE)range: < 4.18.0-513.5.1.el8_9
- (no CPE)range: < 4.18.0-513.5.1.el8_9
- (no CPE)range: < 4.18.0-513.5.1.el8_9
- (no CPE)range: < 4.18.0-513.5.1.el8_9
- (no CPE)range: < 4.18.0-513.5.1.el8_9
- (no CPE)range: < 4.18.0-513.5.1.el8_9
- (no CPE)range: < 4.18.0-513.5.1.el8_9
- (no CPE)range: < 4.18.0-513.5.1.el8_9
- (no CPE)range: < 5.14.21-150400.24.66.1
- (no CPE)range: < 5.14.21-150500.55.7.1
- (no CPE)range: < 5.14.21-150400.24.66.1
- (no CPE)range: < 5.14.21-150500.55.7.1
- (no CPE)range: < 5.14.21-150400.14.52.1
- (no CPE)range: < 5.14.21-150500.33.3.1
- (no CPE)range: < 5.14.21-150400.24.66.1
- (no CPE)range: < 5.14.21-150500.55.7.1
- (no CPE)range: < 5.14.21-150400.24.66.1.150400.24.29.1
- (no CPE)range: < 5.14.21-150500.55.7.1.150500.6.2.5
- (no CPE)range: < 5.14.21-150400.24.66.1.150400.24.29.1
- (no CPE)range: < 5.14.21-150400.24.66.1
- (no CPE)range: < 5.14.21-150500.55.7.1
- (no CPE)range: < 5.14.21-150400.24.66.1
- (no CPE)range: < 5.14.21-150400.24.66.2
- (no CPE)range: < 5.14.21-150500.55.7.1
- (no CPE)range: < 5.14.21-150400.24.66.1
- (no CPE)range: < 5.14.21-150500.55.7.1
- (no CPE)range: < 5.14.21-150400.24.66.1
- (no CPE)range: < 5.14.21-150500.55.7.1
- (no CPE)range: < 5.14.21-150400.24.66.1
- (no CPE)range: < 5.14.21-150500.55.7.1
- (no CPE)range: < 5.14.21-150400.15.37.2
- (no CPE)range: < 5.14.21-150500.13.5.1
- (no CPE)range: < 5.14.21-150400.15.37.2
- (no CPE)range: < 5.14.21-150500.13.5.1
- (no CPE)range: < 5.14.21-150400.15.37.2
- (no CPE)range: < 5.14.21-150400.14.52.1
- (no CPE)range: < 5.14.21-150500.33.3.1
- (no CPE)range: < 5.14.21-150400.24.66.1
- (no CPE)range: < 5.14.21-150500.55.7.1
- (no CPE)range: < 5.14.21-150400.15.37.1
- (no CPE)range: < 5.14.21-150500.13.5.1
- (no CPE)range: < 5.14.21-150400.14.52.1
- (no CPE)range: < 5.14.21-150500.33.3.1
- (no CPE)range: < 5.14.21-150400.24.66.1
- (no CPE)range: < 5.14.21-150500.55.7.1
- (no CPE)range: < 5.14.21-150400.15.37.1
- (no CPE)range: < 5.14.21-150500.13.5.1
- (no CPE)range: < 5.14.21-150400.24.66.1
- (no CPE)range: < 5.14.21-150500.55.7.1
- (no CPE)range: < 5.14.21-150400.24.66.1
- (no CPE)range: < 5.14.21-150500.55.7.1
- (no CPE)range: < 5.14.21-150400.14.52.1
- (no CPE)range: < 5.14.21-150500.33.3.1
- (no CPE)range: < 5.14.21-150400.24.66.1.150400.24.29.1
- (no CPE)range: < 5.14.21-150400.24.66.1.150400.24.29.1
- (no CPE)range: < 5.14.21-150400.24.66.1.150400.24.29.1
- (no CPE)range: < 5.14.21-150500.55.7.1.150500.6.2.5
- (no CPE)range: < 5.14.21-150400.24.66.1
- (no CPE)range: < 5.14.21-150500.55.7.1
- (no CPE)range: < 5.14.21-150400.24.66.1
- (no CPE)range: < 5.14.21-150500.55.7.1
- (no CPE)range: < 5.14.21-150400.24.66.1
- (no CPE)range: < 5.14.21-150400.24.66.1
- (no CPE)range: < 5.14.21-150400.24.66.1
- (no CPE)range: < 5.14.21-150500.55.7.1
- (no CPE)range: < 5.14.21-150400.24.66.1
- (no CPE)range: < 5.14.21-150500.55.7.1
- (no CPE)range: < 5.14.21-150400.24.66.1
- (no CPE)range: < 5.14.21-150500.55.7.1
- (no CPE)range: < 5.14.21-150400.24.66.2
- (no CPE)range: < 5.14.21-150500.55.7.1
- (no CPE)range: < 1-150400.1.9.2
- (no CPE)range: < 1-150400.9.3.1
- (no CPE)range: < 1-150500.11.5.1
- (no CPE)range: < 1-150500.11.7.1
- (no CPE)range: < 5.14.21-150400.24.66.1
- (no CPE)range: < 5.14.21-150500.55.7.1
- (no CPE)range: < 5.14.21-150400.15.37.2
- (no CPE)range: < 5.14.21-150500.13.5.1
- (no CPE)range: < 5.14.21-150400.15.37.2
- (no CPE)range: < 5.14.21-150400.15.37.2
- (no CPE)range: < 5.14.21-150400.15.37.2
- (no CPE)range: < 5.14.21-150500.13.5.1
- (no CPE)range: < 5.14.21-150400.14.52.1
- (no CPE)range: < 5.14.21-150500.33.3.1
- (no CPE)range: < 5.14.21-150400.24.66.1
- (no CPE)range: < 5.14.21-150500.55.7.1
- (no CPE)range: < 5.14.21-150400.24.66.1
- (no CPE)range: < 5.14.21-150500.55.7.1
- (no CPE)range: < 5.14.21-150400.15.37.1
- (no CPE)range: < 5.14.21-150500.13.5.1
- (no CPE)range: < 5.14.21-150400.14.52.1
- (no CPE)range: < 5.14.21-150500.33.3.1
- (no CPE)range: < 5.14.21-150400.24.66.1
- (no CPE)range: < 5.14.21-150500.55.7.1
- (no CPE)range: < 5.14.21-150400.15.37.1
- (no CPE)range: < 5.14.21-150500.13.5.1
- (no CPE)range: < 5.14.21-150400.24.66.1
- (no CPE)range: < 5.14.21-150500.55.7.1
Patches
Vulnerability mechanics
References
6- lists.debian.org/debian-lts-announce/2023/05/msg00005.htmlmitremailing-list
- lists.debian.org/debian-lts-announce/2023/05/msg00006.htmlmitremailing-list
- packetstormsecurity.com/files/173757/Kernel-Live-Patch-Security-Notice-LSN-0096-1.htmlmitre
- cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.2.8mitre
- github.com/torvalds/linux/commit/112e66017bff7f2837030f34c2bc19501e9212d5mitre
- security.netapp.com/advisory/ntap-20230511-0007/mitre
News mentions
0No linked articles in our index yet.