CVE-2024-44948

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-44948
In the Linux kernel, the following vulnerability has been resolved: x86/mtrr: Check if fixed MTRRs exist before saving them MTRRs have an obsolete fixed variant for fine grained caching control of the 640K-1MB region that uses separate MSRs. This fixed variant has a separate capability bit in the MTRR capability MSR. So far all x86 CPUs which support MTRR have this separate bit set, so it went unnoticed that mtrr_save_state() does not check the capability bit before accessing the fixed MTRR MSRs. Though on a CPU that does not support the fixed MTRR capability this results in a #GP. The #GP itself is harmless because the RDMSR fault is handled gracefully, but results in a WARN_ON(). Add the missing capability check to prevent this.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/06c1de44d378ec5439db17bf476507d68589bfe9 Patch
https://git.kernel.org/stable/c/34f36e6ee5bd7eff8b2adcd9fcaef369f752d82e Patch
https://git.kernel.org/stable/c/388f1c954019f253a8383f7eb733f38d541e10b6 Patch
https://git.kernel.org/stable/c/450b6b22acdaac67a18eaf5ed498421ffcf10051 Patch
https://git.kernel.org/stable/c/8a90d3fc7c24608548d3a750671f9dac21d1a462 Patch
https://git.kernel.org/stable/c/8aa79dfb216b865e96ff890bc4ea71650f9bc8d7 Patch
https://git.kernel.org/stable/c/919f18f961c03d6694aa726c514184f2311a4614 Patch
https://git.kernel.org/stable/c/ca7d00c5656d1791e28369919e3e10febe9c3b16 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.11:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.11:rc2:*:*:*:*:*:*
History

09 Oct 2025, 18:22

Type Values Removed Values Added
CWE NVD-CWE-noinfo
First Time Linux
Linux linux Kernel
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.11:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.11:rc2:*:*:*:*:*:*
References () https://git.kernel.org/stable/c/06c1de44d378ec5439db17bf476507d68589bfe9 - () https://git.kernel.org/stable/c/06c1de44d378ec5439db17bf476507d68589bfe9 - Patch
References () https://git.kernel.org/stable/c/34f36e6ee5bd7eff8b2adcd9fcaef369f752d82e - () https://git.kernel.org/stable/c/34f36e6ee5bd7eff8b2adcd9fcaef369f752d82e - Patch
References () https://git.kernel.org/stable/c/388f1c954019f253a8383f7eb733f38d541e10b6 - () https://git.kernel.org/stable/c/388f1c954019f253a8383f7eb733f38d541e10b6 - Patch
References () https://git.kernel.org/stable/c/450b6b22acdaac67a18eaf5ed498421ffcf10051 - () https://git.kernel.org/stable/c/450b6b22acdaac67a18eaf5ed498421ffcf10051 - Patch
References () https://git.kernel.org/stable/c/8a90d3fc7c24608548d3a750671f9dac21d1a462 - () https://git.kernel.org/stable/c/8a90d3fc7c24608548d3a750671f9dac21d1a462 - Patch
References () https://git.kernel.org/stable/c/8aa79dfb216b865e96ff890bc4ea71650f9bc8d7 - () https://git.kernel.org/stable/c/8aa79dfb216b865e96ff890bc4ea71650f9bc8d7 - Patch
References () https://git.kernel.org/stable/c/919f18f961c03d6694aa726c514184f2311a4614 - () https://git.kernel.org/stable/c/919f18f961c03d6694aa726c514184f2311a4614 - Patch
References () https://git.kernel.org/stable/c/ca7d00c5656d1791e28369919e3e10febe9c3b16 - () https://git.kernel.org/stable/c/ca7d00c5656d1791e28369919e3e10febe9c3b16 - Patch

05 Sep 2024, 12:53

Type Values Removed Values Added
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: x86/mtrr: comprobar si existen MTRR fijos antes de guardarlos Los MTRR tienen una variante fija obsoleta para el control de almacenamiento en caché de grano fino de la región de 640K-1MB que utiliza MSR separados. Esta variante fija tiene un bit de capacidad independiente en el MSR de capacidad MTRR. Hasta ahora, todas las CPU x86 que admiten MTRR tienen este bit independiente configurado, por lo que pasó desapercibido que mtrr_save_state() no comprueba el bit de capacidad antes de acceder a los MSR MTRR fijos. Aunque en una CPU que no admite la capacidad MTRR fija, esto da como resultado un #GP. El #GP en sí es inofensivo porque el error RDMSR se maneja con elegancia, pero da como resultado un WARN_ON(). Agregue la comprobación de capacidad faltante para evitar esto.

04 Sep 2024, 19:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-09-04 19:15

Updated : 2025-10-09 18:22

NVD link : CVE-2024-44948

Mitre link : CVE-2024-44948

CVE.ORG link : CVE-2024-44948

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
NVD-CWE-noinfo