PT-2024-33948 · Linux+9 · Linux Kernel+9
Kirk Swidowski
·
Published
2024-10-20
·
Updated
2025-11-18
·
CVE-2024-50115
CVSS v3.1
7.1
High
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H |
Name of the Vulnerable Software and Affected Versions:
Linux kernel versions prior to 6.6.61
Description:
The issue is related to the KVM: nSVM flow in the Linux kernel, where bits 4:0 of CR3 are not ignored when loading PDPTEs from memory for nested SVM. This can result in an out-of-bounds read in the worst-case scenario, for example, if the target page is at the end of a memslot and the VMM isn't using guard pages. According to the APM and SDM, the low 5 address bits 4:0 of the CR3 register are assumed to be 0 and ignored.
Recommendations:
For Linux kernel versions prior to 6.6.61, update to version 6.6.61 or later to resolve the issue. As a temporary workaround, consider restricting the use of the nSVM flow in KVM to minimize the risk of exploitation.
Exploit
Fix
Out of bounds Read
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Alt Linux
Almalinux
Astra Linux
Debian
Linuxmint
Linux Kernel
Red Hat
Red Os
Suse
Ubuntu