CVE-2024-53241

x86/xen: don't do PV iret hypercall through hypercall page

Severity Score

"-"

*CVSS v-

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

In the Linux kernel, the following vulnerability has been resolved:

x86/xen: don't do PV iret hypercall through hypercall page

Instead of jumping to the Xen hypercall page for doing the iret
hypercall, directly code the required sequence in xen-asm.S.

This is done in preparation of no longer using hypercall page at all,
as it has shown to cause problems with speculation mitigations.

This is part of XSA-466 / CVE-2024-53241.

En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: x86/xen: no realizar la hiperllamada de PV iret a través de la página de hiperllamada En lugar de saltar a la página de hiperllamada de Xen para realizar la hiperllamada iret, codificar directamente la secuencia requerida en xen-asm.S. Esto se hace como preparación para no utilizar más la página de hiperllamada, ya que se ha demostrado que causa problemas con las mitigaciones de especulación. Esto es parte de XSA-466 / CVE-2024-53241.

*Credits: N/A

CVSS Scores

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Scope

Confidentiality

Integrity

Availability

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2024-11-19 CVE Reserved
2024-12-24 CVE Published
2024-12-24 CVE Updated
---------- EPSS Updated
---------- Exploited in Wild
---------- KEV Due Date
---------- First Exploit

CWE

CAPEC

References (9)

URL	Tag	Source
http://www.openwall.com/lists/oss-security/2024/12/17/2
http://www.openwall.com/lists/oss-security/2024/12/23/1
http://xenbits.xen.org/xsa/advisory-466.html

URL	Date	SRC

URL	Date	SRC
https://git.kernel.org/stable/c/05df6e6cd9a76b778aee33c3c18c9f3b3566d4a5	2024-12-19
https://git.kernel.org/stable/c/c7b4cfa6213a44fa48714186dfdf125072d036e3	2024-12-19
https://git.kernel.org/stable/c/fa719857f613fed94a79da055b13ca51214c694f	2024-12-19
https://git.kernel.org/stable/c/82c211ead1ec440dbf81727e17b03b5e3c44b93d	2024-12-19
https://git.kernel.org/stable/c/f7c3fdad0a474062d566aae3289d490d7e702d30	2024-12-19
https://git.kernel.org/stable/c/a2796dff62d6c6bfc5fbebdf2bee0d5ac0438906	2024-12-13

URL	Date	SRC

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				< 5.10.232 Search vendor "Linux" for product "Linux Kernel" and version " < 5.10.232"		en		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				< 5.15.175 Search vendor "Linux" for product "Linux Kernel" and version " < 5.15.175"		en		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				< 6.1.121 Search vendor "Linux" for product "Linux Kernel" and version " < 6.1.121"		en		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				< 6.6.67 Search vendor "Linux" for product "Linux Kernel" and version " < 6.6.67"		en		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				< 6.12.6 Search vendor "Linux" for product "Linux Kernel" and version " < 6.12.6"		en		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				< 6.13-rc4 Search vendor "Linux" for product "Linux Kernel" and version " < 6.13-rc4"		en		Affected