PT-2024-9072 · Linux+9 · Linux Kernel+9

Alexander Potapenko

·

Published

2024-04-24

·

Updated

2025-09-29

·

CVE-2024-36953

CVSS v3.1

5.5

Medium

VectorAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions: Linux kernel (affected versions not specified)
Description: The issue is related to the Linux kernel's KVM component, specifically the vgic-v2 module. It involves the vgic v2 parse attr() function, which is responsible for finding the vCPU that matches the user-provided CPUID. If the ID is invalid, kvm get vcpu by id() returns NULL, which is not handled properly. This can lead to a denial of service. The vgic v2 parse attr() function is similar to the GICv3 uaccess flow, and it checks that kvm get vcpu by id() actually returns something and fails the ioctl if not.
Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

DoS

NULL Pointer Dereference

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

ALSA-2024:7000
ALSA-2024:7001
ALSA-2025_16880
BDU:2024-10754
CESA-2024_7000
CESA-2024_7001
CVE-2024-36953
DLA-3843-1
DSA-5703-1
INFSA-2024_7000
INFSA-2024_7001
MGASA-2024-0263
MGASA-2024-0266
OPENSUSE-SU-2024_3551-1
OPENSUSE-SU-2024_3561-1
OPENSUSE-SU-2024_3564-1
OPENSUSE-SU-2024_4315-1
OPENSUSE-SU-2024_4376-1
RHSA-2024:7000
RHSA-2024:7001
RHSA-2024_7000
RHSA-2024_7001
RLSA-2024:7001
SUSE-SU-2024:3551-1
SUSE-SU-2024:3553-1
SUSE-SU-2024:3561-1
SUSE-SU-2024:3564-1
SUSE-SU-2024:4315-1
SUSE-SU-2024:4364-1
SUSE-SU-2024:4376-1
SUSE-SU-2025:20073-1
SUSE-SU-2025:20077-1
USN-6949-1
USN-6949-2
USN-6950-1
USN-6950-2
USN-6950-3
USN-6950-4
USN-6952-1
USN-6952-2
USN-6955-1
USN-6956-1
USN-6957-1
USN-7019-1
USN-7121-1
USN-7121-2
USN-7121-3
USN-7159-1
USN-7159-2
USN-7159-3
USN-7159-4
USN-7159-5
USN-7195-1
USN-7195-2

Affected Products

Almalinux
Astra Linux
Centos
Linuxmint
Linux Kernel
Red Hat
Red Os
Rocky Linux
Suse
Ubuntu