PT-2024-8228 · Linux+5 · Linux Kernel+5
Published
2024-02-16
·
Updated
2025-02-03
·
CVE-2024-35804
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions:
Linux kernel (affected versions not specified)
Description:
The issue is related to the KVM component of the Linux kernel, specifically with the emulation of atomic instructions. When KVM emulates an atomic access on behalf of the guest, it may corrupt guest memory during live migration by writing to guest memory without informing userspace that the page is dirty. The problem occurred because marking the page dirty was unintentionally dropped when KVM's emulated CMPXCHG was converted to do a user access. The fix involves marking the target gfn dirty if the CMPXCHG by KVM is attempted and doesn't fault, even if the CMPXCHG fails.
Recommendations:
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Memory Leak
Buffer Overflow
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Astra Linux
Linuxmint
Linux Kernel
Red Os
Suse
Ubuntu