PT-2025-3141 · Linux+5 · Linux Kernel+5
Published
2024-11-27
·
Updated
2025-05-29
·
CVE-2024-55881
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 6.6.74
Description
The issue is related to the KVM: x86 component in the Linux kernel, specifically with the
complete hypercall exit() function. It affects guests with protected state, such as SEV-ES and SEV-SNP. The problem arises when detecting 64-bit hypercalls, as the vCPU state needed for detection is unavailable. This leads to a warning when a specific hypercall is generated via VMGEXIT. The estimated number of potentially affected devices is not provided.Recommendations
For Linux kernel versions prior to 6.6.74, update to version 6.6.74 or later to resolve the issue. As a temporary workaround, consider restricting the use of the
complete hypercall exit() function until a patch is available. Additionally, be cautious when using the KVM HC MAP GPA RANGE hypercall via VMGEXIT to avoid triggering the warning.Exploit
Fix
RCE
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Astra Linux
Linuxmint
Linux Kernel
Red Os
Suse
Ubuntu