CVE-2023-54095 (GCVE-0-2023-54095)

Vulnerability from cvelistv5 – Published: 2025-12-24 13:06 – Updated: 2026-08-05 09:17
VLAI
Title
powerpc/iommu: Fix notifiers being shared by PCI and VIO buses
Summary
In the Linux kernel, the following vulnerability has been resolved: powerpc/iommu: Fix notifiers being shared by PCI and VIO buses fail_iommu_setup() registers the fail_iommu_bus_notifier struct to both PCI and VIO buses. struct notifier_block is a linked list node, so this causes any notifiers later registered to either bus type to also be registered to the other since they share the same node. This causes issues in (at least) the vgaarb code, which registers a notifier for PCI buses. pci_notify() ends up being called on a vio device, converted with to_pci_dev() even though it's not a PCI device, and finally makes a bad access in vga_arbiter_add_pci_device() as discovered with KASAN: BUG: KASAN: slab-out-of-bounds in vga_arbiter_add_pci_device+0x60/0xe00 Read of size 4 at addr c000000264c26fdc by task swapper/0/1 Call Trace: dump_stack_lvl+0x1bc/0x2b8 (unreliable) print_report+0x3f4/0xc60 kasan_report+0x244/0x698 __asan_load4+0xe8/0x250 vga_arbiter_add_pci_device+0x60/0xe00 pci_notify+0x88/0x444 notifier_call_chain+0x104/0x320 blocking_notifier_call_chain+0xa0/0x140 device_add+0xac8/0x1d30 device_register+0x58/0x80 vio_register_device_node+0x9ac/0xce0 vio_bus_scan_register_devices+0xc4/0x13c __machine_initcall_pseries_vio_device_init+0x94/0xf0 do_one_initcall+0x12c/0xaa8 kernel_init_freeable+0xa48/0xba8 kernel_init+0x64/0x400 ret_from_kernel_thread+0x5c/0x64 Fix this by creating separate notifier_block structs for each bus type. [mpe: Add #ifdef to fix CONFIG_IBMVIO=n build]
Severity
7 (High)
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Assigner
References
Impacted products
Vendor Product Version
Linux Linux Affected: d6b9a81b2a45786384f5bd3516bd6ddfb4b772c6 , < dc0d107e624ca96aef6dd8722eb33ba3a6d157b0 (git)
Affected: d6b9a81b2a45786384f5bd3516bd6ddfb4b772c6 , < 075a4dcdbc9a5ea793cb8ec8b78a6c0b7636fd52 (git)
Affected: d6b9a81b2a45786384f5bd3516bd6ddfb4b772c6 , < 65bf8a196ba25cf65a858b5bb8de80f0aad76691 (git)
Affected: d6b9a81b2a45786384f5bd3516bd6ddfb4b772c6 , < f08944e3c6962b00827de7263a9e20688e79ad84 (git)
Affected: d6b9a81b2a45786384f5bd3516bd6ddfb4b772c6 , < a9ddbfed53465bc7c411231db32a488066c0c1be (git)
Affected: d6b9a81b2a45786384f5bd3516bd6ddfb4b772c6 , < f17d5efaafba3d5f02f0373f7c5f44711d676f3e (git)
Affected: d6b9a81b2a45786384f5bd3516bd6ddfb4b772c6 , < c46af58588253e5e4063bb5ddc78cd12fdf9e55d (git)
Affected: d6b9a81b2a45786384f5bd3516bd6ddfb4b772c6 , < 6670c65bf863cd0d44ca24d4c10ef6755b8d9529 (git)
Affected: d6b9a81b2a45786384f5bd3516bd6ddfb4b772c6 , < c37b6908f7b2bd24dcaaf14a180e28c9132b9c58 (git)
Create a notification for this product.
Linux Linux Affected: 3.6
Unaffected: 0 , < 3.6 (semver)
Unaffected: 4.14.326 , ≤ 4.14.* (semver)
Unaffected: 4.19.295 , ≤ 4.19.* (semver)
Unaffected: 5.4.257 , ≤ 5.4.* (semver)
Unaffected: 5.10.195 , ≤ 5.10.* (semver)
Unaffected: 5.15.132 , ≤ 5.15.* (semver)
Unaffected: 6.1.53 , ≤ 6.1.* (semver)
Unaffected: 6.4.16 , ≤ 6.4.* (semver)
Unaffected: 6.5.3 , ≤ 6.5.* (semver)
Unaffected: 6.6 , ≤ * (original_commit_for_fix)
Create a notification for this product.
Show details on NVD website
To clipboard 

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "arch/powerpc/kernel/iommu.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "dc0d107e624ca96aef6dd8722eb33ba3a6d157b0",
              "status": "affected",
              "version": "d6b9a81b2a45786384f5bd3516bd6ddfb4b772c6",
              "versionType": "git"
            },
            {
              "lessThan": "075a4dcdbc9a5ea793cb8ec8b78a6c0b7636fd52",
              "status": "affected",
              "version": "d6b9a81b2a45786384f5bd3516bd6ddfb4b772c6",
              "versionType": "git"
            },
            {
              "lessThan": "65bf8a196ba25cf65a858b5bb8de80f0aad76691",
              "status": "affected",
              "version": "d6b9a81b2a45786384f5bd3516bd6ddfb4b772c6",
              "versionType": "git"
            },
            {
              "lessThan": "f08944e3c6962b00827de7263a9e20688e79ad84",
              "status": "affected",
              "version": "d6b9a81b2a45786384f5bd3516bd6ddfb4b772c6",
              "versionType": "git"
            },
            {
              "lessThan": "a9ddbfed53465bc7c411231db32a488066c0c1be",
              "status": "affected",
              "version": "d6b9a81b2a45786384f5bd3516bd6ddfb4b772c6",
              "versionType": "git"
            },
            {
              "lessThan": "f17d5efaafba3d5f02f0373f7c5f44711d676f3e",
              "status": "affected",
              "version": "d6b9a81b2a45786384f5bd3516bd6ddfb4b772c6",
              "versionType": "git"
            },
            {
              "lessThan": "c46af58588253e5e4063bb5ddc78cd12fdf9e55d",
              "status": "affected",
              "version": "d6b9a81b2a45786384f5bd3516bd6ddfb4b772c6",
              "versionType": "git"
            },
            {
              "lessThan": "6670c65bf863cd0d44ca24d4c10ef6755b8d9529",
              "status": "affected",
              "version": "d6b9a81b2a45786384f5bd3516bd6ddfb4b772c6",
              "versionType": "git"
            },
            {
              "lessThan": "c37b6908f7b2bd24dcaaf14a180e28c9132b9c58",
              "status": "affected",
              "version": "d6b9a81b2a45786384f5bd3516bd6ddfb4b772c6",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "arch/powerpc/kernel/iommu.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "3.6"
            },
            {
              "lessThan": "3.6",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "4.14.*",
              "status": "unaffected",
              "version": "4.14.326",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "4.19.*",
              "status": "unaffected",
              "version": "4.19.295",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.4.*",
              "status": "unaffected",
              "version": "5.4.257",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.195",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.132",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.53",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.4.*",
              "status": "unaffected",
              "version": "6.4.16",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.5.*",
              "status": "unaffected",
              "version": "6.5.3",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "6.6",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "4.14.326",
                  "versionStartIncluding": "3.6",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "4.19.295",
                  "versionStartIncluding": "3.6",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.4.257",
                  "versionStartIncluding": "3.6",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.195",
                  "versionStartIncluding": "3.6",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.132",
                  "versionStartIncluding": "3.6",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.53",
                  "versionStartIncluding": "3.6",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.4.16",
                  "versionStartIncluding": "3.6",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.5.3",
                  "versionStartIncluding": "3.6",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.6",
                  "versionStartIncluding": "3.6",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\npowerpc/iommu: Fix notifiers being shared by PCI and VIO buses\n\nfail_iommu_setup() registers the fail_iommu_bus_notifier struct to both\nPCI and VIO buses.  struct notifier_block is a linked list node, so this\ncauses any notifiers later registered to either bus type to also be\nregistered to the other since they share the same node.\n\nThis causes issues in (at least) the vgaarb code, which registers a\nnotifier for PCI buses.  pci_notify() ends up being called on a vio\ndevice, converted with to_pci_dev() even though it\u0027s not a PCI device,\nand finally makes a bad access in vga_arbiter_add_pci_device() as\ndiscovered with KASAN:\n\n BUG: KASAN: slab-out-of-bounds in vga_arbiter_add_pci_device+0x60/0xe00\n Read of size 4 at addr c000000264c26fdc by task swapper/0/1\n\n Call Trace:\n   dump_stack_lvl+0x1bc/0x2b8 (unreliable)\n   print_report+0x3f4/0xc60\n   kasan_report+0x244/0x698\n   __asan_load4+0xe8/0x250\n   vga_arbiter_add_pci_device+0x60/0xe00\n   pci_notify+0x88/0x444\n   notifier_call_chain+0x104/0x320\n   blocking_notifier_call_chain+0xa0/0x140\n   device_add+0xac8/0x1d30\n   device_register+0x58/0x80\n   vio_register_device_node+0x9ac/0xce0\n   vio_bus_scan_register_devices+0xc4/0x13c\n   __machine_initcall_pseries_vio_device_init+0x94/0xf0\n   do_one_initcall+0x12c/0xaa8\n   kernel_init_freeable+0xa48/0xba8\n   kernel_init+0x64/0x400\n   ret_from_kernel_thread+0x5c/0x64\n\nFix this by creating separate notifier_block structs for each bus type.\n\n[mpe: Add #ifdef to fix CONFIG_IBMVIO=n build]"
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 7,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "scenarios": [
            {
              "lang": "en",
              "value": "AV:L - The defect lives in powerpc arch code exercised by PCI/VIO bus device registration; it manifests during local device enumeration at boot or via locally-initiated DLPAR hotplug, with no network- or adjacent-facing input path.\nAC:H - Exploitation requires the rare non-default debug config CONFIG_FAIL_IOMMU (depends on CONFIG_FAULT_INJECTION, in no shipped defconfig) on a pseries system built with both PCI and IBMVIO, and the type-confusion outcome depends on whatever slab contents happen to precede the vio_dev allocation \u2014 heap layout an attacker cannot influence on the boot path.\nPR:L - On an affected build the corruption fires during normal device registration without any privilege, and the resulting bogus vga_device is published through the vga arbiter to ordinary local users; taking the higher-severity option, no more than basic unprivileged local access is assumed.\nUI:N - The faulty notifier chain is spliced by an arch_initcall and fires automatically when VIO devices are registered during boot; no victim action is needed.\nS:U - The bug is in sysfs notifier registration, not in IOMMU TCE/DMA-window translation, so no DMA or virtualization isolation boundary is crossed \u2014 impact stays within the kernel\u0027s own security authority.\nC:H - to_pci_dev() on a vio_dev is a type confusion producing KASAN-confirmed slab-out-of-bounds reads of kernel memory that is then interpreted as struct pci_dev fields and surfaced through vgaarb logging, the vga_list and boot_vga sysfs state.\nI:H - Type confusion is treated as high integrity impact: the confused pointer reaches an indirect call through pdev-\u003ebus-\u003eops read from out-of-bounds memory, and the eeh_remove_device() path performs stores through the same wild pointer, giving write and control-flow corruption primitives.\nA:H - The reported failure is a KASAN slab-out-of-bounds during early boot device registration, and dereferencing a fabricated struct pci_dev readily oopses or panics the kernel, rendering an affected pseries LPAR unbootable."
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-05T09:17:13.179Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/dc0d107e624ca96aef6dd8722eb33ba3a6d157b0"
        },
        {
          "url": "https://git.kernel.org/stable/c/075a4dcdbc9a5ea793cb8ec8b78a6c0b7636fd52"
        },
        {
          "url": "https://git.kernel.org/stable/c/65bf8a196ba25cf65a858b5bb8de80f0aad76691"
        },
        {
          "url": "https://git.kernel.org/stable/c/f08944e3c6962b00827de7263a9e20688e79ad84"
        },
        {
          "url": "https://git.kernel.org/stable/c/a9ddbfed53465bc7c411231db32a488066c0c1be"
        },
        {
          "url": "https://git.kernel.org/stable/c/f17d5efaafba3d5f02f0373f7c5f44711d676f3e"
        },
        {
          "url": "https://git.kernel.org/stable/c/c46af58588253e5e4063bb5ddc78cd12fdf9e55d"
        },
        {
          "url": "https://git.kernel.org/stable/c/6670c65bf863cd0d44ca24d4c10ef6755b8d9529"
        },
        {
          "url": "https://git.kernel.org/stable/c/c37b6908f7b2bd24dcaaf14a180e28c9132b9c58"
        }
      ],
      "title": "powerpc/iommu: Fix notifiers being shared by PCI and VIO buses",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2023-54095",
    "datePublished": "2025-12-24T13:06:23.157Z",
    "dateReserved": "2025-12-24T13:02:52.516Z",
    "dateUpdated": "2026-08-05T09:17:13.179Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2023-54095",
      "date": "2026-08-10",
      "epss": "0.00142",
      "percentile": "0.03945"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2023-54095\",\"sourceIdentifier\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"published\":\"2025-12-24T13:16:11.383\",\"lastModified\":\"2026-08-04T10:19:28.880\",\"vulnStatus\":\"Deferred\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"In the Linux kernel, the following vulnerability has been resolved:\\n\\npowerpc/iommu: Fix notifiers being shared by PCI and VIO buses\\n\\nfail_iommu_setup() registers the fail_iommu_bus_notifier struct to both\\nPCI and VIO buses.  struct notifier_block is a linked list node, so this\\ncauses any notifiers later registered to either bus type to also be\\nregistered to the other since they share the same node.\\n\\nThis causes issues in (at least) the vgaarb code, which registers a\\nnotifier for PCI buses.  pci_notify() ends up being called on a vio\\ndevice, converted with to_pci_dev() even though it\u0027s not a PCI device,\\nand finally makes a bad access in vga_arbiter_add_pci_device() as\\ndiscovered with KASAN:\\n\\n BUG: KASAN: slab-out-of-bounds in vga_arbiter_add_pci_device+0x60/0xe00\\n Read of size 4 at addr c000000264c26fdc by task swapper/0/1\\n\\n Call Trace:\\n   dump_stack_lvl+0x1bc/0x2b8 (unreliable)\\n   print_report+0x3f4/0xc60\\n   kasan_report+0x244/0x698\\n   __asan_load4+0xe8/0x250\\n   vga_arbiter_add_pci_device+0x60/0xe00\\n   pci_notify+0x88/0x444\\n   notifier_call_chain+0x104/0x320\\n   blocking_notifier_call_chain+0xa0/0x140\\n   device_add+0xac8/0x1d30\\n   device_register+0x58/0x80\\n   vio_register_device_node+0x9ac/0xce0\\n   vio_bus_scan_register_devices+0xc4/0x13c\\n   __machine_initcall_pseries_vio_device_init+0x94/0xf0\\n   do_one_initcall+0x12c/0xaa8\\n   kernel_init_freeable+0xa48/0xba8\\n   kernel_init+0x64/0x400\\n   ret_from_kernel_thread+0x5c/0x64\\n\\nFix this by creating separate notifier_block structs for each bus type.\\n\\n[mpe: Add #ifdef to fix CONFIG_IBMVIO=n build]\"}],\"affected\":[{\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"affectedData\":[{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"unaffected\",\"programFiles\":[\"arch/powerpc/kernel/iommu.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"d6b9a81b2a45786384f5bd3516bd6ddfb4b772c6\",\"lessThan\":\"dc0d107e624ca96aef6dd8722eb33ba3a6d157b0\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"d6b9a81b2a45786384f5bd3516bd6ddfb4b772c6\",\"lessThan\":\"075a4dcdbc9a5ea793cb8ec8b78a6c0b7636fd52\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"d6b9a81b2a45786384f5bd3516bd6ddfb4b772c6\",\"lessThan\":\"65bf8a196ba25cf65a858b5bb8de80f0aad76691\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"d6b9a81b2a45786384f5bd3516bd6ddfb4b772c6\",\"lessThan\":\"f08944e3c6962b00827de7263a9e20688e79ad84\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"d6b9a81b2a45786384f5bd3516bd6ddfb4b772c6\",\"lessThan\":\"a9ddbfed53465bc7c411231db32a488066c0c1be\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"d6b9a81b2a45786384f5bd3516bd6ddfb4b772c6\",\"lessThan\":\"f17d5efaafba3d5f02f0373f7c5f44711d676f3e\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"d6b9a81b2a45786384f5bd3516bd6ddfb4b772c6\",\"lessThan\":\"c46af58588253e5e4063bb5ddc78cd12fdf9e55d\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"d6b9a81b2a45786384f5bd3516bd6ddfb4b772c6\",\"lessThan\":\"6670c65bf863cd0d44ca24d4c10ef6755b8d9529\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"d6b9a81b2a45786384f5bd3516bd6ddfb4b772c6\",\"lessThan\":\"c37b6908f7b2bd24dcaaf14a180e28c9132b9c58\",\"versionType\":\"git\",\"status\":\"affected\"}]},{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"affected\",\"programFiles\":[\"arch/powerpc/kernel/iommu.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"3.6\",\"status\":\"affected\"},{\"version\":\"0\",\"lessThan\":\"3.6\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"4.14.326\",\"lessThanOrEqual\":\"4.14.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"4.19.295\",\"lessThanOrEqual\":\"4.19.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.4.257\",\"lessThanOrEqual\":\"5.4.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.10.195\",\"lessThanOrEqual\":\"5.10.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.15.132\",\"lessThanOrEqual\":\"5.15.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.1.53\",\"lessThanOrEqual\":\"6.1.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.4.16\",\"lessThanOrEqual\":\"6.4.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.5.3\",\"lessThanOrEqual\":\"6.5.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.6\",\"lessThanOrEqual\":\"*\",\"versionType\":\"original_commit_for_fix\",\"status\":\"unaffected\"}]}]}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H\",\"baseScore\":7.0,\"baseSeverity\":\"HIGH\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"HIGH\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.0,\"impactScore\":5.9}]},\"references\":[{\"url\":\"https://git.kernel.org/stable/c/075a4dcdbc9a5ea793cb8ec8b78a6c0b7636fd52\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/65bf8a196ba25cf65a858b5bb8de80f0aad76691\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/6670c65bf863cd0d44ca24d4c10ef6755b8d9529\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/a9ddbfed53465bc7c411231db32a488066c0c1be\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/c37b6908f7b2bd24dcaaf14a180e28c9132b9c58\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/c46af58588253e5e4063bb5ddc78cd12fdf9e55d\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/dc0d107e624ca96aef6dd8722eb33ba3a6d157b0\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/f08944e3c6962b00827de7263a9e20688e79ad84\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/f17d5efaafba3d5f02f0373f7c5f44711d676f3e\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"}]}}",
    "redhat_vex": {
      "aggregate_severity": "Low",
      "current_release_date": "2026-08-04T22:54:00+00:00",
      "cve": "CVE-2023-54095",
      "id": "CVE-2023-54095",
      "initial_release_date": "2023-01-01T00:00:00+00:00",
      "product_status:fixed": "280",
      "product_status:known_affected": "112",
      "product_status:known_not_affected": "84",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "kernel: powerpc/iommu: Fix notifiers being shared by PCI and VIO buses",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-54095.json",
      "version": "3"
    },
    "suse_vex": {
      "aggregate_severity": "moderate",
      "current_release_date": "2026-07-25T02:07:46Z",
      "cve": "CVE-2023-54095",
      "id": "CVE-2023-54095",
      "initial_release_date": "2025-12-25T00:55:45Z",
      "product_status:known_affected": "472",
      "product_status:known_not_affected": "83",
      "product_status:recommended": "449",
      "source": "SUSE CSAF VEX",
      "status": "interim",
      "title": "SUSE CVE CVE-2023-54095",
      "url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2023-54095.json",
      "version": "39"
    }
  }
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.