CVE-2024-36953

Advisory lineage Upstream: 0 Downstream: 39
Analyzed
Published: 30 May 2024, 15:35
Last modified:11 May 2026, 20:17

Vulnerability Summary

Overall Risk (default)
low
22/100
CVSS Score
5.5 MEDIUM
v3.1 (nvd)
EPSS Score
0.01% LOW
0% probability 0.00%
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

30 May 2024, 15:35
Published
Vulnerability first disclosed
11 May 2026, 20:17
Last Modified
Vulnerability information updated

Description

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: vgic-v2: Check for non-NULL vCPU in vgic_v2_parse_attr() vgic_v2_parse_attr() is responsible for finding the vCPU that matches the user-provided CPUID, which (of course) may not be valid. If the ID is invalid, kvm_get_vcpu_by_id() returns NULL, which isn't handled gracefully. Similar to the GICv3 uaccess flow, check that kvm_get_vcpu_by_id() actually returns something and fail the ioctl if not.

CVSS Metrics

  • v3.1•MEDIUM•Score: 4.4CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
  • v3.1•MEDIUM•Score: 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS Trends

Current EPSS score: 0.01%• Percentile: 2%

Techniques & Countermeasures

  • CWE-476•NULL Pointer Dereference

    The product dereferences a pointer that it expects to be valid but is NULL.

Affected Systems

  • debian•debian_linux

    10.0

  • linux•linux

    ≥ 7d450e2821710718fd6703e9c486249cee913bab, < 4404465a1bee3607ad90a4c5f9e16dfd75b85728 | ≥ 7d450e2821710718fd6703e9c486249cee913bab, < 17db92da8be5dd3bf63c01f4109fe47db64fc66f | ≥ 7d450e2821710718fd6703e9c486249cee913bab, < 3a5b0378ac6776c7c31b18e0f3c1389bd6005e80 | ≥ 7d450e2821710718fd6703e9c486249cee913bab, < 8d6a1c8e3de36cb0f5e866f1a582b00939e23104 | ≥ 7d450e2821710718fd6703e9c486249cee913bab, < 01981276d64e542c177b243f7c979fee855d5487 | ≥ 7d450e2821710718fd6703e9c486249cee913bab, < 6ddb4f372fc63210034b903d96ebbeb3c7195adb | 4.7

  • linux•linux_kernel

    ≥ 4.7, < 5.10.217 | ≥ 5.11, < 5.15.159 | ≥ 5.16, < 6.1.91 | ≥ 6.2, < 6.6.31 | ≥ 6.7, < 6.8.10 | 6.9:rc1 | 6.9:rc2 | 6.9:rc3 | 6.9:rc4 | 6.9:rc5 | 6.9:rc6

References (7)