vulnerability
Ubuntu: (Multiple Advisories) (CVE-2024-44948): Linux kernel vulnerabilities
Severity | CVSS | Published | Added | Modified |
---|---|---|---|---|
5 | (AV:L/AC:L/Au:S/C:N/I:N/A:C) | Sep 4, 2024 | Nov 4, 2024 | Feb 18, 2025 |
Description
In the Linux kernel, the following vulnerability has been resolved:
x86/mtrr: Check if fixed MTRRs exist before saving them
MTRRs have an obsolete fixed variant for fine grained caching control
of the 640K-1MB region that uses separate MSRs. This fixed variant has
a separate capability bit in the MTRR capability MSR.
So far all x86 CPUs which support MTRR have this separate bit set, so it
went unnoticed that mtrr_save_state() does not check the capability bit
before accessing the fixed MTRR MSRs.
Though on a CPU that does not support the fixed MTRR capability this
results in a #GP. The #GP itself is harmless because the RDMSR fault is
handled gracefully, but results in a WARN_ON().
Add the missing capability check to prevent this.
Solution(s)
References
- CVE-2024-44948
- https://attackerkb.com/topics/CVE-2024-44948
- UBUNTU-USN-7088-1
- UBUNTU-USN-7088-2
- UBUNTU-USN-7088-3
- UBUNTU-USN-7088-4
- UBUNTU-USN-7088-5
- UBUNTU-USN-7100-1
- UBUNTU-USN-7100-2
- UBUNTU-USN-7119-1
- UBUNTU-USN-7123-1
- UBUNTU-USN-7144-1
- UBUNTU-USN-7154-1
- UBUNTU-USN-7154-2
- UBUNTU-USN-7155-1
- UBUNTU-USN-7156-1
- UBUNTU-USN-7194-1
- UBUNTU-USN-7196-1

Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.