CVE-2023-53769

In the Linux kernel, the following vulnerability has been resolved: virt/coco/sev-guest: Double-buffer messages The encryption algorithms read and write directly to shared unencrypted memory, which may leak information as well as permit the host to tamper with the message integrity. Instead, copy whole messages in or out as needed before doing any computation on them.

CVSS v3 9.3 CRITICAL

9.3^/10

CVSS v3 : CRITICAL

Vector :

Exploitability : 2.5 / Impact : 6.0

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope CHANGED

References

Link	Resource
https://git.kernel.org/stable/c/4b69c63f716cfda38e1210e65b68f67f6cee2ddf
https://git.kernel.org/stable/c/577a64725bfd77645986168e953d405067ee565b
https://git.kernel.org/stable/c/965006103a14703cc42043bbf9b5e0cdf7a468ad
https://git.kernel.org/stable/c/c27dafc4aa50a29ec927b3aa84ac7b430071f682

Configurations

No configuration.

History

No history.

Information

Published : 2025-12-08 02:15

Updated : 2026-08-04 10:19

NVD link : CVE-2023-53769

Mitre link : CVE-2023-53769

CVE.ORG link : CVE-2023-53769

JSON object : View

Products Affected

No product.

CWE

No CWE.

{"id": "CVE-2023-53769", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 9.3, "attackVector": "LOCAL", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 6.0, "exploitabilityScore": 2.5}]}, "affected": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "affectedData": [{"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "d5af44dde5461d125d1602ac913ab5c6bdf09b8b", "lessThan": "577a64725bfd77645986168e953d405067ee565b", "versionType": "git"}, {"status": "affected", "version": "d5af44dde5461d125d1602ac913ab5c6bdf09b8b", "lessThan": "c27dafc4aa50a29ec927b3aa84ac7b430071f682", "versionType": "git"}, {"status": "affected", "version": "d5af44dde5461d125d1602ac913ab5c6bdf09b8b", "lessThan": "4b69c63f716cfda38e1210e65b68f67f6cee2ddf", "versionType": "git"}, {"status": "affected", "version": "d5af44dde5461d125d1602ac913ab5c6bdf09b8b", "lessThan": "965006103a14703cc42043bbf9b5e0cdf7a468ad", "versionType": "git"}], "programFiles": ["drivers/virt/coco/sev-guest/sev-guest.c"], "defaultStatus": "unaffected"}, {"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "5.19"}, {"status": "unaffected", "version": "0", "lessThan": "5.19", "versionType": "semver"}, {"status": "unaffected", "version": "6.1.28", "versionType": "semver", "lessThanOrEqual": "6.1.*"}, {"status": "unaffected", "version": "6.2.15", "versionType": "semver", "lessThanOrEqual": "6.2.*"}, {"status": "unaffected", "version": "6.3.2", "versionType": "semver", "lessThanOrEqual": "6.3.*"}, {"status": "unaffected", "version": "6.4", "versionType": "original_commit_for_fix", "lessThanOrEqual": "*"}], "programFiles": ["drivers/virt/coco/sev-guest/sev-guest.c"], "defaultStatus": "affected"}]}], "published": "2025-12-08T02:15:52.920", "references": [{"url": "https://git.kernel.org/stable/c/4b69c63f716cfda38e1210e65b68f67f6cee2ddf", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/577a64725bfd77645986168e953d405067ee565b", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/965006103a14703cc42043bbf9b5e0cdf7a468ad", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/c27dafc4aa50a29ec927b3aa84ac7b430071f682", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "vulnStatus": "Deferred", "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nvirt/coco/sev-guest: Double-buffer messages\n\nThe encryption algorithms read and write directly to shared unencrypted\nmemory, which may leak information as well as permit the host to tamper\nwith the message integrity. Instead, copy whole messages in or out as\nneeded before doing any computation on them."}], "lastModified": "2026-08-04T10:19:20.820", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}