Database/Kernel, userspace & hypervisor
Intel CPU (Reptar): Redundant REX-prefix MOVSB causes unpredictable behaviour
Impact
Redundant REX-prefix MOVSB causes unpredictable behaviour - a guest can hang or crash the entire host, with possible privilege escalation
Who can reach it
Any tenant process in a container; tenant VM guest
What to do
Microcode update + reboot. Pure availability risk for a neocloud: one tenant can take down a whole node
Fleet impact
How widespread
very common - broad recent Intel Xeon coverage, the host CPU under most NVIDIA GPU nodes
Cost to remediate
microcode+reboot - Intel shipped microcode, but on many platforms it only lands via a BIOS/UEFI update from the OEM, adding an OEM-image dependency on top of the reboot
Why it hits the whole fleet
An unprivileged instruction sequence can hang or machine-check the host, or potentially escalate privilege - so a single tenant can crash a whole GPU node, and the same instruction works on every node of that Xeon generation.
References
Related entries
- Intel i915 graphics driver for Linux (kernel < 6.2.10): A memory-buffer bounds failure in the i915 kernel driver thatCVE-2023-28410 · Intel i915 graphics driver for Linux (kernel < 6.2.10)High
- CephFS/RBD kernel client (libceph messenger v2): A signedness bug in net/ceph/messenger_v2.c turns an attacker-chosenCVE-2023-44466 · CephFS/RBD kernel client (libceph messenger v2)High
- Linux kernel (drivers/iommu/iommufd): Splitting a mapping area - which is what a partial unmap does - leaves theCVE-2023-52801 · Linux kernel (drivers/iommu/iommufd)High
- Linux kernel (drivers/iommu): The IOVA allocator's retry path overflows, so the lower-bound check is made against zeroCVE-2023-52910 · Linux kernel (drivers/iommu)High
- Linux kernel (drivers/iommu/iommufd): An unmap runs off the end of the pinned page list and drops pin counts on pagesCVE-2023-53630 · Linux kernel (drivers/iommu/iommufd)High
- Linux kernel (drivers/iommu/iommufd): The same hardware page table gets linked into an address space's page-table listCVE-2023-54043 · Linux kernel (drivers/iommu/iommufd)High
This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.