CVE - CVE-2024-44948

CVE-ID
CVE-2024-44948	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
In the Linux kernel, the following vulnerability has been resolved: x86/mtrr: Check if fixed MTRRs exist before saving them MTRRs have an obsolete fixed variant for fine grained caching control of the 640K-1MB region that uses separate MSRs. This fixed variant has a separate capability bit in the MTRR capability MSR. So far all x86 CPUs which support MTRR have this separate bit set, so it went unnoticed that mtrr_save_state() does not check the capability bit before accessing the fixed MTRR MSRs. Though on a CPU that does not support the fixed MTRR capability this results in a #GP. The #GP itself is harmless because the RDMSR fault is handled gracefully, but results in a WARN_ON(). Add the missing capability check to prevent this.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:https://git.kernel.org/stable/c/06c1de44d378ec5439db17bf476507d68589bfe9 URL:https://git.kernel.org/stable/c/06c1de44d378ec5439db17bf476507d68589bfe9 MISC:https://git.kernel.org/stable/c/34f36e6ee5bd7eff8b2adcd9fcaef369f752d82e URL:https://git.kernel.org/stable/c/34f36e6ee5bd7eff8b2adcd9fcaef369f752d82e MISC:https://git.kernel.org/stable/c/388f1c954019f253a8383f7eb733f38d541e10b6 URL:https://git.kernel.org/stable/c/388f1c954019f253a8383f7eb733f38d541e10b6 MISC:https://git.kernel.org/stable/c/450b6b22acdaac67a18eaf5ed498421ffcf10051 URL:https://git.kernel.org/stable/c/450b6b22acdaac67a18eaf5ed498421ffcf10051 MISC:https://git.kernel.org/stable/c/8a90d3fc7c24608548d3a750671f9dac21d1a462 URL:https://git.kernel.org/stable/c/8a90d3fc7c24608548d3a750671f9dac21d1a462 MISC:https://git.kernel.org/stable/c/8aa79dfb216b865e96ff890bc4ea71650f9bc8d7 URL:https://git.kernel.org/stable/c/8aa79dfb216b865e96ff890bc4ea71650f9bc8d7 MISC:https://git.kernel.org/stable/c/919f18f961c03d6694aa726c514184f2311a4614 URL:https://git.kernel.org/stable/c/919f18f961c03d6694aa726c514184f2311a4614 MISC:https://git.kernel.org/stable/c/ca7d00c5656d1791e28369919e3e10febe9c3b16 URL:https://git.kernel.org/stable/c/ca7d00c5656d1791e28369919e3e10febe9c3b16
Assigning CNA
kernel.org
Date Record Created
20240821	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20240821)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)