PT-2025-7425 · Kernel · Kernel

Published 2025-02-21 · Updated 2025-03-05 · CVE-2024-47896

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:L/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Kernel software (affected versions not specified)

Description The issue allows kernel software installed and running inside a Guest VM to potentially exploit memory shared with the GPU Firmware, enabling it to write data outside the Guest's virtualised GPU memory.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-823

Related Identifiers

BDU:2025-09013

CVE-2024-47896

Affected Products

Kernel

References · 7

• https://bdu.fstec.ru/vul/2025-09013 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-47896 · Security Note
• https://t.me/cvedetector/18731 · Telegram Post
• https://twitter.com/CVEnew/status/1893318021902471666 · Twitter Post
• https://t.me/cvenotify/112148 · Telegram Post
• https://t.me/cvenotify/113577 · Telegram Post
• https://imaginationtech.com/gpu-driver-vulnerabilities · Note