PT-2024-26819 · Linux+5 · Linux Kernel+5
Yihuang Yu
·
Published
2024-04-05
·
Updated
2025-03-27
·
CVE-2024-35980
CVSS v2.0
7.5
High
| Vector | AV:N/AC:L/Au:N/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
A vulnerability has been resolved in the Linux kernel related to the arm64: tlb: Fix TLBI RANGE operand. The issue arises when the KVM/arm64 relies on the TLBI RANGE feature to flush TLBs during live migration, but the operand passed to the TLBI RANGE instruction is not correctly sorted out. This leads to a crash on the destination VM after live migration because TLBs are not flushed completely, and some dirty pages are missed. The problem is caused by the commit 117940aa6e5f, which defined
kvm tlb flush vmid range(). The fix involves extending TLBI RANGE NUM() to support the combination of SCALE#3 and NUM#31.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Integer Underflow
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Astra Linux
Linuxmint
Linux Kernel
Red Os
Suse
Ubuntu