Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2024-53241

x86/xen: don't do PV iret hypercall through hypercall page

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: x86/xen: don't do PV iret hypercall through hypercall page Instead of jumping to the Xen hypercall page for doing the iret hypercall, directly code the required sequence in xen-asm.S. This is done in preparation of no longer using hypercall page at all, as it has shown to cause problems with speculation mitigations. This is part of XSA-466 / CVE-2024-53241.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • cdacc1278b12d929f9a053c245ff3d16eb7af9f8 to < 05df6e6cd9a76b778aee33c3c18c9f3b3566d4a5affected
  • cdacc1278b12d929f9a053c245ff3d16eb7af9f8 to < c7b4cfa6213a44fa48714186dfdf125072d036e3affected
  • cdacc1278b12d929f9a053c245ff3d16eb7af9f8 to < fa719857f613fed94a79da055b13ca51214c694faffected
  • cdacc1278b12d929f9a053c245ff3d16eb7af9f8 to < 82c211ead1ec440dbf81727e17b03b5e3c44b93daffected
  • cdacc1278b12d929f9a053c245ff3d16eb7af9f8 to < f7c3fdad0a474062d566aae3289d490d7e702d30affected
  • cdacc1278b12d929f9a053c245ff3d16eb7af9f8 to < a2796dff62d6c6bfc5fbebdf2bee0d5ac0438906affected

Linux Linux

Default version status: affected

  • 2.6.27affected
  • 0 to < 2.6.27unaffected
  • 5.10.232 to ≤ 5.10.*unaffected
  • 5.15.175 to ≤ 5.15.*unaffected
  • 6.1.121 to ≤ 6.1.*unaffected
  • 6.6.67 to ≤ 6.6.*unaffected
  • 6.12.6 to ≤ 6.12.*unaffected
  • 6.13 to ≤ *unaffected

References