Unrated severityNVD Advisory· Published Sep 25, 2023· Updated Feb 27, 2025
Possible dos from guest to host invringh_kiov_advance in vhost driver at drivers/vhost/vringh.c
CVE-2023-5158
Description
A flaw was found in vringh_kiov_advance in drivers/vhost/vringh.c in the host side of a virtio ring in the Linux Kernel. This issue may result in a denial of service from guest to host via zero length descriptor.
Affected products
104cpe:/o:redhat:enterprise_linux:6+ 3 more
- cpe:/o:redhat:enterprise_linux:6
- cpe:/o:redhat:enterprise_linux:7
- cpe:/o:redhat:enterprise_linux:8
- cpe:/o:redhat:enterprise_linux:9
- osv-coords99 versionspkg:deb/ubuntu/linux-azure@6.5.0-1010.10?arch=source&distro=manticpkg:deb/ubuntu/linux-gcp@6.5.0-1010.10?arch=source&distro=manticpkg:rpm/opensuse/dtb-aarch64&distro=openSUSE%20Leap%2015.4pkg:rpm/opensuse/dtb-aarch64&distro=openSUSE%20Leap%2015.5pkg:rpm/opensuse/kernel-64kb&distro=openSUSE%20Leap%2015.4pkg:rpm/opensuse/kernel-64kb&distro=openSUSE%20Leap%2015.5pkg:rpm/opensuse/kernel-azure&distro=openSUSE%20Leap%2015.4pkg:rpm/opensuse/kernel-azure&distro=openSUSE%20Leap%2015.5pkg:rpm/opensuse/kernel-debug&distro=openSUSE%20Leap%2015.4pkg:rpm/opensuse/kernel-debug&distro=openSUSE%20Leap%2015.5pkg:rpm/opensuse/kernel-default-base&distro=openSUSE%20Leap%2015.4pkg:rpm/opensuse/kernel-default-base&distro=openSUSE%20Leap%2015.5pkg:rpm/opensuse/kernel-default-base&distro=openSUSE%20Leap%20Micro%205.3pkg:rpm/opensuse/kernel-default-base&distro=openSUSE%20Leap%20Micro%205.4pkg:rpm/opensuse/kernel-default&distro=openSUSE%20Leap%2015.4pkg:rpm/opensuse/kernel-default&distro=openSUSE%20Leap%2015.5pkg:rpm/opensuse/kernel-default&distro=openSUSE%20Leap%20Micro%205.3pkg:rpm/opensuse/kernel-default&distro=openSUSE%20Leap%20Micro%205.4pkg:rpm/opensuse/kernel-docs&distro=openSUSE%20Leap%2015.4pkg:rpm/opensuse/kernel-docs&distro=openSUSE%20Leap%2015.5pkg:rpm/opensuse/kernel-kvmsmall&distro=openSUSE%20Leap%2015.4pkg:rpm/opensuse/kernel-kvmsmall&distro=openSUSE%20Leap%2015.5pkg:rpm/opensuse/kernel-obs-build&distro=openSUSE%20Leap%2015.4pkg:rpm/opensuse/kernel-obs-build&distro=openSUSE%20Leap%2015.5pkg:rpm/opensuse/kernel-obs-qa&distro=openSUSE%20Leap%2015.4pkg:rpm/opensuse/kernel-obs-qa&distro=openSUSE%20Leap%2015.5pkg:rpm/opensuse/kernel-rt_debug&distro=openSUSE%20Leap%2015.4pkg:rpm/opensuse/kernel-rt_debug&distro=openSUSE%20Leap%2015.5pkg:rpm/opensuse/kernel-rt&distro=openSUSE%20Leap%2015.4pkg:rpm/opensuse/kernel-rt&distro=openSUSE%20Leap%2015.5pkg:rpm/opensuse/kernel-rt&distro=openSUSE%20Leap%20Micro%205.3pkg:rpm/opensuse/kernel-rt&distro=openSUSE%20Leap%20Micro%205.4pkg:rpm/opensuse/kernel-source-azure&distro=openSUSE%20Leap%2015.4pkg:rpm/opensuse/kernel-source-azure&distro=openSUSE%20Leap%2015.5pkg:rpm/opensuse/kernel-source&distro=openSUSE%20Leap%2015.4pkg:rpm/opensuse/kernel-source&distro=openSUSE%20Leap%2015.5pkg:rpm/opensuse/kernel-source-rt&distro=openSUSE%20Leap%2015.4pkg:rpm/opensuse/kernel-source-rt&distro=openSUSE%20Leap%2015.5pkg:rpm/opensuse/kernel-syms-azure&distro=openSUSE%20Leap%2015.4pkg:rpm/opensuse/kernel-syms-azure&distro=openSUSE%20Leap%2015.5pkg:rpm/opensuse/kernel-syms&distro=openSUSE%20Leap%2015.4pkg:rpm/opensuse/kernel-syms&distro=openSUSE%20Leap%2015.5pkg:rpm/opensuse/kernel-syms-rt&distro=openSUSE%20Leap%2015.4pkg:rpm/opensuse/kernel-syms-rt&distro=openSUSE%20Leap%2015.5pkg:rpm/opensuse/kernel-zfcpdump&distro=openSUSE%20Leap%2015.4pkg:rpm/opensuse/kernel-zfcpdump&distro=openSUSE%20Leap%2015.5pkg:rpm/suse/kernel-64kb&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP4pkg:rpm/suse/kernel-64kb&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP5pkg:rpm/suse/kernel-azure&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Public%20Cloud%2015%20SP4pkg:rpm/suse/kernel-azure&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Public%20Cloud%2015%20SP5pkg:rpm/suse/kernel-default-base&distro=SUSE%20Linux%20Enterprise%20Micro%205.3pkg:rpm/suse/kernel-default-base&distro=SUSE%20Linux%20Enterprise%20Micro%205.4pkg:rpm/suse/kernel-default-base&distro=SUSE%20Linux%20Enterprise%20Micro%205.5pkg:rpm/suse/kernel-default-base&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP4pkg:rpm/suse/kernel-default-base&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP5pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20High%20Availability%20Extension%2015%20SP4pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20High%20Availability%20Extension%2015%20SP5pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Live%20Patching%2015%20SP4pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Live%20Patching%2015%20SP5pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Micro%205.3pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Micro%205.4pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Micro%205.5pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP4pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP5pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Legacy%2015%20SP4pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Legacy%2015%20SP5pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Workstation%20Extension%2015%20SP4pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Workstation%20Extension%2015%20SP5pkg:rpm/suse/kernel-docs&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Development%20Tools%2015%20SP4pkg:rpm/suse/kernel-docs&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Development%20Tools%2015%20SP5pkg:rpm/suse/kernel-livepatch-SLE15-SP4-RT_Update_16&distro=SUSE%20Linux%20Enterprise%20Live%20Patching%2015%20SP4pkg:rpm/suse/kernel-livepatch-SLE15-SP4_Update_21&distro=SUSE%20Linux%20Enterprise%20Live%20Patching%2015%20SP4pkg:rpm/suse/kernel-livepatch-SLE15-SP5-RT_Update_8&distro=SUSE%20Linux%20Enterprise%20Live%20Patching%2015%20SP5pkg:rpm/suse/kernel-livepatch-SLE15-SP5_Update_8&distro=SUSE%20Linux%20Enterprise%20Live%20Patching%2015%20SP5pkg:rpm/suse/kernel-obs-build&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Development%20Tools%2015%20SP4pkg:rpm/suse/kernel-obs-build&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Development%20Tools%2015%20SP5pkg:rpm/suse/kernel-rt_debug&distro=SUSE%20Real%20Time%20Module%2015%20SP4pkg:rpm/suse/kernel-rt_debug&distro=SUSE%20Real%20Time%20Module%2015%20SP5pkg:rpm/suse/kernel-rt&distro=SUSE%20Linux%20Enterprise%20Micro%205.3pkg:rpm/suse/kernel-rt&distro=SUSE%20Linux%20Enterprise%20Micro%205.4pkg:rpm/suse/kernel-rt&distro=SUSE%20Linux%20Enterprise%20Micro%205.5pkg:rpm/suse/kernel-rt&distro=SUSE%20Real%20Time%20Module%2015%20SP4pkg:rpm/suse/kernel-rt&distro=SUSE%20Real%20Time%20Module%2015%20SP5pkg:rpm/suse/kernel-source-azure&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Public%20Cloud%2015%20SP4pkg:rpm/suse/kernel-source-azure&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Public%20Cloud%2015%20SP5pkg:rpm/suse/kernel-source&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP4pkg:rpm/suse/kernel-source&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP5pkg:rpm/suse/kernel-source&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Development%20Tools%2015%20SP4pkg:rpm/suse/kernel-source&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Development%20Tools%2015%20SP5pkg:rpm/suse/kernel-source-rt&distro=SUSE%20Real%20Time%20Module%2015%20SP4pkg:rpm/suse/kernel-source-rt&distro=SUSE%20Real%20Time%20Module%2015%20SP5pkg:rpm/suse/kernel-syms-azure&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Public%20Cloud%2015%20SP4pkg:rpm/suse/kernel-syms-azure&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Public%20Cloud%2015%20SP5pkg:rpm/suse/kernel-syms&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Development%20Tools%2015%20SP4pkg:rpm/suse/kernel-syms&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Development%20Tools%2015%20SP5pkg:rpm/suse/kernel-syms-rt&distro=SUSE%20Real%20Time%20Module%2015%20SP4pkg:rpm/suse/kernel-syms-rt&distro=SUSE%20Real%20Time%20Module%2015%20SP5pkg:rpm/suse/kernel-zfcpdump&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP4pkg:rpm/suse/kernel-zfcpdump&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP5
< 6.5.0-1010.10+ 98 more
- (no CPE)range: < 6.5.0-1010.10
- (no CPE)range: < 6.5.0-1010.10
- (no CPE)range: < 5.14.21-150400.24.100.1
- (no CPE)range: < 5.14.21-150500.55.39.1
- (no CPE)range: < 5.14.21-150400.24.100.2
- (no CPE)range: < 5.14.21-150500.55.39.1
- (no CPE)range: < 5.14.21-150400.14.75.1
- (no CPE)range: < 5.14.21-150500.33.26.1
- (no CPE)range: < 5.14.21-150400.24.100.2
- (no CPE)range: < 5.14.21-150500.55.39.1
- (no CPE)range: < 5.14.21-150400.24.100.2.150400.24.46.2
- (no CPE)range: < 5.14.21-150500.55.39.1.150500.6.17.1
- (no CPE)range: < 5.14.21-150400.24.100.2.150400.24.46.2
- (no CPE)range: < 5.14.21-150400.24.100.2.150400.24.46.2
- (no CPE)range: < 5.14.21-150400.24.100.2
- (no CPE)range: < 5.14.21-150500.55.39.1
- (no CPE)range: < 5.14.21-150400.24.100.2
- (no CPE)range: < 5.14.21-150400.24.100.2
- (no CPE)range: < 5.14.21-150400.24.100.1
- (no CPE)range: < 5.14.21-150500.55.39.1
- (no CPE)range: < 5.14.21-150400.24.100.2
- (no CPE)range: < 5.14.21-150500.55.39.1
- (no CPE)range: < 5.14.21-150400.24.100.2
- (no CPE)range: < 5.14.21-150500.55.39.1
- (no CPE)range: < 5.14.21-150400.24.100.1
- (no CPE)range: < 5.14.21-150500.55.39.1
- (no CPE)range: < 5.14.21-150400.15.62.1
- (no CPE)range: < 5.14.21-150500.13.27.2
- (no CPE)range: < 5.14.21-150400.15.62.1
- (no CPE)range: < 5.14.21-150500.13.27.2
- (no CPE)range: < 5.14.21-150400.15.62.1
- (no CPE)range: < 5.14.21-150400.15.62.1
- (no CPE)range: < 5.14.21-150400.14.75.1
- (no CPE)range: < 5.14.21-150500.33.26.1
- (no CPE)range: < 5.14.21-150400.24.100.2
- (no CPE)range: < 5.14.21-150500.55.39.1
- (no CPE)range: < 5.14.21-150400.15.62.1
- (no CPE)range: < 5.14.21-150500.13.27.2
- (no CPE)range: < 5.14.21-150400.14.75.1
- (no CPE)range: < 5.14.21-150500.33.26.1
- (no CPE)range: < 5.14.21-150400.24.100.1
- (no CPE)range: < 5.14.21-150500.55.39.1
- (no CPE)range: < 5.14.21-150400.15.62.1
- (no CPE)range: < 5.14.21-150500.13.27.1
- (no CPE)range: < 5.14.21-150400.24.100.2
- (no CPE)range: < 5.14.21-150500.55.39.1
- (no CPE)range: < 5.14.21-150400.24.100.2
- (no CPE)range: < 5.14.21-150500.55.39.1
- (no CPE)range: < 5.14.21-150400.14.75.1
- (no CPE)range: < 5.14.21-150500.33.26.1
- (no CPE)range: < 5.14.21-150400.24.100.2.150400.24.46.2
- (no CPE)range: < 5.14.21-150400.24.100.2.150400.24.46.2
- (no CPE)range: < 5.14.21-150500.55.39.1.150500.6.17.1
- (no CPE)range: < 5.14.21-150400.24.100.2.150400.24.46.2
- (no CPE)range: < 5.14.21-150500.55.39.1.150500.6.17.1
- (no CPE)range: < 5.14.21-150400.24.100.2
- (no CPE)range: < 5.14.21-150500.55.39.1
- (no CPE)range: < 5.14.21-150400.24.100.2
- (no CPE)range: < 5.14.21-150500.55.39.1
- (no CPE)range: < 5.14.21-150400.24.100.2
- (no CPE)range: < 5.14.21-150400.24.100.2
- (no CPE)range: < 5.14.21-150500.55.39.1
- (no CPE)range: < 5.14.21-150400.24.100.2
- (no CPE)range: < 5.14.21-150500.55.39.1
- (no CPE)range: < 5.14.21-150400.24.100.2
- (no CPE)range: < 5.14.21-150500.55.39.1
- (no CPE)range: < 5.14.21-150400.24.100.2
- (no CPE)range: < 5.14.21-150500.55.39.1
- (no CPE)range: < 5.14.21-150400.24.100.1
- (no CPE)range: < 5.14.21-150500.55.39.1
- (no CPE)range: < 1-150400.1.3.1
- (no CPE)range: < 1-150400.9.3.2
- (no CPE)range: < 1-150500.11.3.2
- (no CPE)range: < 1-150500.11.3.1
- (no CPE)range: < 5.14.21-150400.24.100.2
- (no CPE)range: < 5.14.21-150500.55.39.1
- (no CPE)range: < 5.14.21-150400.15.62.1
- (no CPE)range: < 5.14.21-150500.13.27.2
- (no CPE)range: < 5.14.21-150400.15.62.1
- (no CPE)range: < 5.14.21-150400.15.62.1
- (no CPE)range: < 5.14.21-150500.13.27.2
- (no CPE)range: < 5.14.21-150400.15.62.1
- (no CPE)range: < 5.14.21-150500.13.27.2
- (no CPE)range: < 5.14.21-150400.14.75.1
- (no CPE)range: < 5.14.21-150500.33.26.1
- (no CPE)range: < 5.14.21-150400.24.100.2
- (no CPE)range: < 5.14.21-150500.55.39.1
- (no CPE)range: < 5.14.21-150400.24.100.2
- (no CPE)range: < 5.14.21-150500.55.39.1
- (no CPE)range: < 5.14.21-150400.15.62.1
- (no CPE)range: < 5.14.21-150500.13.27.2
- (no CPE)range: < 5.14.21-150400.14.75.1
- (no CPE)range: < 5.14.21-150500.33.26.1
- (no CPE)range: < 5.14.21-150400.24.100.1
- (no CPE)range: < 5.14.21-150500.55.39.1
- (no CPE)range: < 5.14.21-150400.15.62.1
- (no CPE)range: < 5.14.21-150500.13.27.1
- (no CPE)range: < 5.14.21-150400.24.100.2
- (no CPE)range: < 5.14.21-150500.55.39.1
- Fedora/Fedorav5
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
2- access.redhat.com/security/cve/CVE-2023-5158mitrevdb-entryx_refsource_REDHAT
- bugzilla.redhat.com/show_bug.cgimitreissue-trackingx_refsource_REDHAT
News mentions
0No linked articles in our index yet.