PT-2024-7622 · Linux+9 · Linux Kernel+9

Published 2024-05-23 · Updated 2025-09-29 · CVE-2024-39483

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The vulnerability is related to the KVM: SVM: WARN on vNMI + NMI window iff NMIs are outright masked. When requesting an NMI window, the system warns on vNMI support being enabled if and only if NMIs are actually masked. The intent of KVM's behavior is to provide functionality that is as close to real hardware as possible. However, the probability of both NMIs arriving in an STI shadow is infinitesimally low on real hardware, but significantly larger in a virtual environment.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Special Elements Injection

Weakness Enumeration

CWE-74

Related Identifiers

ALSA-2024:8162

ALSA-2025_16880

ALT-PU-2024-10855

ALT-PU-2024-13979

ALT-PU-2024-14046

AZL-43270

BDU:2024-09028

CVE-2024-39483

INFSA-2024_8162

MGASA-2024-0263

MGASA-2024-0266

OESA-2024-2522

RHSA-2024:8162

RHSA-2024_8162

RLSA-2024:8162

SUSE-SU-2024:3194-1

SUSE-SU-2024:3195-1

SUSE-SU-2024:3383-1

SUSE-SU-2025:20044-1

SUSE-SU-2025:20047-1

USN-6999-1

USN-6999-2

USN-7004-1

USN-7005-1

USN-7005-2

USN-7008-1

USN-7029-1

Affected Products

Alt Linux

Almalinux

Astra Linux

Linuxmint

Linux Kernel

Red Hat

Red Os

Rocky Linux

Suse

Ubuntu

References · 1295

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/39xxx/CVE-2024-39483.json · Exploit
• https://ubuntu.com/security/CVE-2024-40957 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-40984 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-41002 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-47715 · Security Note
• https://ubuntu.com/security/CVE-2024-38780 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-38622 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-47750 · Security Note
• https://ubuntu.com/security/CVE-2024-40921 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-39489 · Vendor Advisory
• https://osv.dev/vulnerability/USN-7029-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-50158 · Security Note
• https://ubuntu.com/security/CVE-2024-39500 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-40912 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-50196 · Security Note