CVE•Published 2025-12-24•Modified 2026-08-04•1 article on news•4 live references•NVD data

CVE-2023-53996

Vulnerability data via NVD (ingested)

CVSS v3.1

9.3

CRITICAL

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

EPSS percentile

Exploit Prediction Scoring System · top 98% of all CVEs

Description

In the Linux kernel, the following vulnerability has been resolved: x86/sev: Make enc_dec_hypercall() accept a size instead of npages enc_dec_hypercall() accepted a page count instead of a size, which forced its callers to round up. As a result, non-page aligned vaddrs caused pages to be spuriously marked as decrypted via the encryption status hypercall, which in turn caused consistent corruption of pages during live migration. Live migration requires accurate encryption status information to avoid migrating pages from the wrong perspective.

Timeline

Published 2025-12-24

Modified 2026-08-04

External references

NVD MITRE Exploit-DB VulnCheck

Search for exposed instances

Shodan + Censys queries derived from NVD's CPE data. The vuln tag catches assets Shodan has explicitly linked to this CVE; the product / banner fingerprints find exposed instances even when the vuln tag was never applied (which is common).

Shodan · vuln tag0 hosts

vuln:CVE-2023-53996

Hosts Shodan has explicitly fingerprinted as vulnerable.

More intel sources (5)

Shodan report

vuln:CVE-2023-53996

Country / ASN / product breakdown for the vuln query.

Censys

vulnerabilities.cve_id: CVE-2023-53996

Censys host search filtered to this CVE id.

grep.app

CVE-2023-53996