PT-2024-41505 · Debian+2 · Debian+2

Published 2024-01-01 · Updated 2026-05-26 · CVE-2024-36331

Positive Technologies (AI Summary)

CVSS v3.1

3.2

Low

Base vector

AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions: linux in Debian Linux (affected versions not specified)

Description: The vulnerability involves evicting cache lines during Secure Nested Paging (SNP) memory validation in x86 systems. This issue affects Debian Linux.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Initialization

Weakness Enumeration

CWE-665

Related Identifiers

BDU:2025-15227

CVE-2024-36331

DLA-4328-1

ECHO-F9DD-EFA9-E79F

USN-7879-1

USN-7879-2

USN-7879-3

USN-7879-4

USN-7880-1

USN-7934-1

USN-8028-1

USN-8028-2

USN-8028-3

USN-8028-4

USN-8028-5

USN-8028-6

USN-8028-7

USN-8028-8

USN-8031-1

USN-8031-2

USN-8031-3

USN-8052-1

USN-8052-2

USN-8074-1

USN-8074-2

USN-8126-1

Affected Products

Debian

Linuxmint

Ubuntu

References · 1306

• https://ubuntu.com/security/CVE-2025-40333 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-40294 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-68222 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38396 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38335 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38576 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38037 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-40106 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-40341 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-39734 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-22128 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-68183 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-23157 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-40083 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38642 · Vendor Advisory