PT-2024-35579 · Linux+5 · Linux Kernel+5

Borislav Petkov + 1 · Published 2024-11-05 · Updated 2026-05-07 · CVE-2024-53114

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue concerns the Linux kernel, specifically with x86/CPU/AMD, where certain Zen4 client SoCs advertise the ability to use virtualized VMLOAD/VMSAVE instructions. However, using these instructions can cause a random host reboot. These instructions are not intended to be advertised on Zen4 client systems.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Improper Resource Release

Weakness Enumeration

CWE-404

Related Identifiers

ALSA-2025_12746

ALSA-2025_12752

ALSA-2025_12753

ALSA-2025_16880

ALT-PU-2024-17211

ALT-PU-2025-12647

AZL-54113

AZL-54177

BDU:2025-07873

CVE-2024-53114

ECHO-468B-7DD3-B785

OESA-2024-2569

OESA-2024-2571

OESA-2025-1032

OESA-2025-1036

OPENSUSE-SU-2024_4314-1

OPENSUSE-SU-2024_4316-1

OPENSUSE-SU-2025_0201-1

OPENSUSE-SU-2025_0229-1

SUSE-SU-2024:4314-1

SUSE-SU-2024:4316-1

SUSE-SU-2024:4318-1

SUSE-SU-2024:4367-1

SUSE-SU-2024:4387-1

SUSE-SU-2025:0035-1

SUSE-SU-2025:0201-1

SUSE-SU-2025:0201-2

SUSE-SU-2025:0229-1

SUSE-SU-2025:20163-1

SUSE-SU-2025:20164-1

SUSE-SU-2025:20246-1

SUSE-SU-2025:20247-1

SUSE-SU-2025_0201-1

SUSE-SU-2025_0201-2

USN-7276-1

USN-7277-1

USN-7310-1

USN-7449-1

USN-7449-2

USN-7450-1

USN-7451-1

USN-7452-1

USN-7453-1

USN-7468-1

USN-7523-1

USN-7524-1

USN-8033-1

USN-8033-2

USN-8033-3

USN-8033-4

USN-8033-5

USN-8033-6

USN-8033-7

USN-8033-8

USN-8034-1

USN-8034-2

USN-8141-1

USN-8163-1

USN-8163-2

USN-8243-1

Affected Products

Alt Linux

Debian

Linuxmint

Linux Kernel

Suse

Ubuntu

References · 2964

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/53xxx/CVE-2024-53114.json · Exploit
• https://ubuntu.com/security/CVE-2024-56623 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-49853 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-50022 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-50112 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-37849 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-47731 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-8163-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-49983 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-68800 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-56756 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-49962 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-40110 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-56681 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-23097 · Vendor Advisory