CVE-2023-5090

Summary

CVE-2023-5090 is a newly identified vulnerability affecting the KVM (Kernel-based Virtual Machine) hypervisor. The issue lies in the svm_set_x2apic_msr_interception() function, where an inadequate check could permit unauthorized access to host x2apic MSRs (Model-Specific Registers). This weakness could be exploited when a guest system resets its APIC (Advanced Programmable Interrupt Controller), potentially triggering a denial-of-service condition.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.