PT-2024-32233 · Linux+6 · Linux Kernel+6
Published
2024-08-22
·
Updated
2026-05-07
·
CVE-2024-46830
CVSS v3.1
7.8
High
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 6.10.0-rc7-332d2c1d713e-next-vm #552
Description
The issue is related to the KVM (Kernel-based Virtual Machine) component in the Linux kernel. Specifically, it involves the handling of KVM SET VCPU EVENTS, where KVM will forcibly leave nested VMX/SVM if SMM mode is being toggled, and leaving nested VMX reads guest memory. The problem arises because the function
kvm vcpu ioctl x86 set vcpu events() can also be called from KVM RUN via sync regs(), which already holds SRCU (Source Control Update). To address this, the kernel now acquires kvm->srcu when handling KVM SET VCPU EVENTS to prevent potential issues with RCU (Read-Copy Update) usage.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Astra Linux
Debian
Linuxmint
Linux Kernel
Red Os
Suse
Ubuntu