Heimdall Security Logo

CVE-2024-50072

Vulnérabilité non évaluée dans Linux (Linux)

CVSS 0.0 · Non évaluée
EPSS 0.2%
Linux•Linux•Versions : <481b477ab63c7245715a3e57ba79eb87c2dc0d02, 6.12, <=6.1.*, <6.6.58, 6.1.116, <=6.11.*, ca13d8cd8dac25558da4ee8df4dc70e8e7f9d762, 0, <bfd1d223d80cb29a210caa1bd5e21f0816d58f02, 50f021f0b985629accf10481a6e89af8b9700583, <ada431c6c31a2c8c37991c46089af5caa23a9c6e, 51eca9f1fd047b500137d021f882d93f03280118, 5.15.154, d54de9f2a127090f2017184e8257795b487d5312, 6.8, 6.11.5, <6.8, <6.1.116, <5.10.229, 6.1.81, <=5.10.*, <=6.6.*, <5.15.171, 5.10.215, <38c5fe74f3bef98f75d16effa49836d50c9b6097, <bc576fbaf82deded606e69a00efe9752136bf91d, 6.6.58, 5.10.229, 2e3087505ddb8ba2d3d4c81306cca11e868fcdb9, <=*, 5.15.171, <=5.15.*, 6.6.21, <e4d2102018542e3ae5e297bc6e229303abff8a0f, a0e2dab44d22b913b4c228c8b52b2a104434b0b3, 6.7.9

Description

In the Linux kernel, the following vulnerability has been resolved: x86/bugs: Use code segment selector for VERW operand Robert Gill reported below #GP in 32-bit mode when dosemu software was executing vm86() system call: general protection fault: 0000 [#1] PREEMPT SMP CPU: 4 PID: 4610 Comm: dosemu.bin Not tainted 6.6.21-gentoo-x86 #1 Hardware name: Dell Inc. PowerEdge 1950/0H723K, BIOS 2.7.0 10/30/2010 EIP: restore_all_switch_stack+0xbe/0xcf EAX: 00000000 EBX: 00000000 ECX: 00000000 EDX: 00000000 ESI: 00000000 EDI: 00000000 EBP: 00000000 ESP: ff8affdc DS: 0000 ES: 0000 FS: 0000 GS: 0033 SS: 0068 EFLAGS: 00010046 CR0: 80050033 CR2: 00c2101c CR3: 04b6d000 CR4: 000406d0 Call Trace: show_regs+0x70/0x78 die_addr+0x29/0x70 exc_general_protection+0x13c/0x348 exc_bounds+0x98/0x98 handle_exception+0x14d/0x14d exc_bounds+0x98/0x98 restore_all_switch_stack+0xbe/0xcf exc_bounds+0x98/0x98 restore_all_switch_stack+0xbe/0xcf This only happens in 32-bit mode when VERW based mitigations like MDS/RFDS are enabled. This is because segment registers with an arbitrary user value can result in #GP when executing VERW. Intel SDM vol. 2C documents the following behavior for VERW instruction: #GP(0) - If a memory operand effective address is outside the CS, DS, ES, FS, or GS segment limit. CLEAR_CPU_BUFFERS macro executes VERW instruction before returning to user space. Use %cs selector to reference VERW operand. This ensures VERW will not #GP for an arbitrary user %ds. [ mingo: Fixed the SOB chain. ]

Gravité et risque d'exploitation

CVE-2024-50072 obtient un score CVSS de 0.0/10, soit une gravité non évaluée. Selon le modèle EPSS, la probabilité qu'elle soit exploitée dans les 30 prochains jours est de 0.23 %, ce qui la place devant 13.1 % des CVE référencées.

Que faire ?

  • Vérifiez si Linux (versions <481b477ab63c7245715a3e57ba79eb87c2dc0d02, 6.12, <=6.1.*, <6.6.58, 6.1.116, <=6.11.*, ca13d8cd8dac25558da4ee8df4dc70e8e7f9d762, 0, <bfd1d223d80cb29a210caa1bd5e21f0816d58f02, 50f021f0b985629accf10481a6e89af8b9700583, <ada431c6c31a2c8c37991c46089af5caa23a9c6e, 51eca9f1fd047b500137d021f882d93f03280118, 5.15.154, d54de9f2a127090f2017184e8257795b487d5312, 6.8, 6.11.5, <6.8, <6.1.116, <5.10.229, 6.1.81, <=5.10.*, <=6.6.*, <5.15.171, 5.10.215, <38c5fe74f3bef98f75d16effa49836d50c9b6097, <bc576fbaf82deded606e69a00efe9752136bf91d, 6.6.58, 5.10.229, 2e3087505ddb8ba2d3d4c81306cca11e868fcdb9, <=*, 5.15.171, <=5.15.*, 6.6.21, <e4d2102018542e3ae5e297bc6e229303abff8a0f, a0e2dab44d22b913b4c228c8b52b2a104434b0b3, 6.7.9) est présent sur votre parc.
  • Appliquez le correctif ou la version corrigée indiqués dans les références de l'éditeur.
  • À défaut de correctif, limitez l'exposition (filtrage réseau, désactivation du composant).
  • Automatisez la détection : les agents CVE Heimdall (gratuits, open source) corrèlent l'inventaire de vos serveurs avec la base CVE.

Références

Rechercher une autre CVE