PT-2024-33905 · Linux+6 · Linux Kernel+6

Robert Gill

·

Published

2024-10-28

·

Updated

2025-10-03

·

CVE-2024-50072

CVSS v3.1

5.5

Medium

VectorAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to the fixed version
Description: A general protection fault occurs in 32-bit mode when VERW based mitigations like MDS/RFDS are enabled. This happens because segment registers with an arbitrary user value can result in #GP when executing VERW. The issue is resolved by using the code segment selector for the VERW operand, ensuring that VERW will not #GP for an arbitrary user %ds.
Recommendations: Update to a version of the Linux kernel where the issue is resolved by using the code segment selector for the VERW operand. As a temporary workaround, consider disabling VERW based mitigations like MDS/RFDS until a patch is available.

Exploit

Fix

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-399

Related Identifiers

ALSA-2025_12746
ALSA-2025_12752
ALSA-2025_12753
ALSA-2025_16880
ALT-PU-2024-17211
ALT-PU-2025-12647
AZL-52077
AZL-52141
BDU:2025-03373
CVE-2024-50072
DLA-4008-1
DLA-4075-1
DSA-5818-1
OESA-2024-2367
OPENSUSE-SU-2024:14500-1
OPENSUSE-SU-2025:14705-1
USN-7276-1
USN-7277-1
USN-7288-1
USN-7288-2
USN-7289-1
USN-7289-2
USN-7289-3
USN-7289-4
USN-7291-1
USN-7305-1
USN-7308-1
USN-7310-1
USN-7331-1
USN-7383-1
USN-7383-2
USN-7384-1
USN-7384-2
USN-7385-1
USN-7386-1
USN-7388-1
USN-7389-1
USN-7390-1
USN-7403-1
USN-7451-1
USN-7458-1
USN-7468-1
USN-7523-1
USN-7524-1

Affected Products

Alt Linux
Astra Linux
Debian
Linuxmint
Linux Kernel
Red Os
Ubuntu