PT-2024-33970 · Linux+5 · Linux Kernel+5
Published
2024-10-16
·
Updated
2025-10-03
·
CVE-2024-50139
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions:
Linux kernel versions prior to 6.6.61
Description:
A shift-out-of-bounds bug has been reported in the Linux kernel when running a VM with MTE enabled host kernel. The bug occurs in the
arch/arm64/kvm/sys regs.c file at line 1988, where a shift exponent of 33 is too large for a 32-bit type int. This issue was detected by UBSAN.Recommendations:
To resolve this issue, update the Linux kernel to version 6.6.61 or later. As a temporary workaround, consider disabling the
kvm reset sys regs function until a patch is available. Restrict access to the vulnerable arch/arm64/kvm/sys regs.c module to minimize the risk of exploitation. Avoid using the shift operation with large exponents in the affected API endpoints until the issue is resolved.Exploit
Fix
Out of bounds Read
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Alt Linux
Astra Linux
Linuxmint
Linux Kernel
Suse
Ubuntu