PT-2024-31318 · Linux+4 · Linux Kernel+4
Published
2024-08-08
·
Updated
2025-02-06
·
CVE-2024-44948
CVSS v2.0
7.5
High
| Vector | AV:N/AC:L/Au:N/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 6.6.50
Description
The issue is related to the x86/mtrr component of the Linux kernel, where the function
mtrr save state() does not check the capability bit before accessing the fixed MTRR MSRs. This can result in a #GP fault on CPUs that do not support the fixed MTRR capability, although the fault is handled gracefully and only results in a WARN ON(). The vulnerability is related to an obsolete fixed variant of MTRRs used for fine-grained caching control of the 640K-1MB region.Recommendations
To resolve the issue, update the Linux kernel to version 6.6.50 or later. As a temporary workaround, consider adding a capability check before accessing the fixed MTRR MSRs to prevent the #GP fault.
Exploit
Fix
RCE
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Linuxmint
Linux Kernel
Red Os
Suse
Ubuntu