PT-2024-32258 · Linux+6 · Linux Kernel+6
Anirudh Rayabharam
·
Published
2024-09-27
·
Updated
2025-09-29
·
CVE-2024-46864
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 6.6.51/6.10.10
Description
The issue is related to a kexec crash due to VP assist page corruption in the Linux kernel. This occurs when the hypervisor corrupts the memory region of the old VP assist page, causing a panic if the kexec kernel is using that memory elsewhere. The problem arises from the introduction of a new cpuhp state for hyperv initialization, which returns 0, and the cpuhp remove state() call being conditioned upon "hyperv init cpuhp > 0", a condition that will never be true. As a result, hv cpu die() won't be called on all CPUs, and the VP assist page won't be reset.
Recommendations
To resolve the issue, upgrade the Linux kernel to version 6.6.51/6.10.10 or later. This upgrade will include the fix for the kexec crash due to VP assist page corruption. As a temporary workaround, consider disabling the
hv cpu die() function until a patch is available. However, the most effective solution is to apply the update to the affected kernel versions.Exploit
Fix
Improper Initialization
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Alt Linux
Linuxmint
Linux Kernel
Red Hat
Red Os
Suse
Ubuntu