CVE - CVE-2024-50193

CVE-ID
CVE-2024-50193	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
In the Linux kernel, the following vulnerability has been resolved: x86/entry_32: Clear CPU buffers after register restore in NMI return CPU buffers are currently cleared after call to exc_nmi, but before register state is restored. This may be okay for MDS mitigation but not for RDFS. Because RDFS mitigation requires CPU buffers to be cleared when registers don't have any sensitive data. Move CLEAR_CPU_BUFFERS after RESTORE_ALL_NMI.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:https://git.kernel.org/stable/c/227358e89703c344008119be7e8ffa3fdb5b92de URL:https://git.kernel.org/stable/c/227358e89703c344008119be7e8ffa3fdb5b92de MISC:https://git.kernel.org/stable/c/43778de19d2ef129636815274644b9c16e78c66b URL:https://git.kernel.org/stable/c/43778de19d2ef129636815274644b9c16e78c66b MISC:https://git.kernel.org/stable/c/48a2440d0f20c826b884e04377ccc1e4696c84e9 URL:https://git.kernel.org/stable/c/48a2440d0f20c826b884e04377ccc1e4696c84e9 MISC:https://git.kernel.org/stable/c/64adf22c4bc73ede920baca5defefb70f190cdbc URL:https://git.kernel.org/stable/c/64adf22c4bc73ede920baca5defefb70f190cdbc MISC:https://git.kernel.org/stable/c/6f44a5fc15b5cece0785bc07453db77d99b0a6de URL:https://git.kernel.org/stable/c/6f44a5fc15b5cece0785bc07453db77d99b0a6de MISC:https://git.kernel.org/stable/c/b6400eb0b347821efc57760221f8fb6d63b9548a URL:https://git.kernel.org/stable/c/b6400eb0b347821efc57760221f8fb6d63b9548a
Assigning CNA
kernel.org
Date Record Created
20241021	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20241021)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)