Critical Vulnerability in Linux Kernel: Zen4 Client VMLOAD/VMSAVE Issue
Summary
CVE-2024-53114: In the Linux kernel, the following vulnerability has been resolved: x86/CPU/AMD: Clear virtualized VMLOAD/VMSAVE on Zen4 client A number of Zen4 client SoCs advertise the ability to use virtualized VMLOAD/VMSAVE, but usi... Affects linux versions 5.10.103-1 – 6.9.9-1. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is the core component of many operating systems, providing essential services for all other parts of the system. It manages hardware resources, system calls, and process scheduling. The kernel is crucial for system stability and performance. However, certain Zen4 client SoCs have been found to incorrectly advertise the ability to use virtualized VMLOAD/VMSAVE instructions, leading to potential system instability and random host reboots.
Vulnerability Detail
In the Linux kernel, a vulnerability has been identified in the handling of virtualized VMLOAD/VMSAVE instructions on Zen4 client SoCs. These instructions are not intended to be advertised on these processors, and their use can result in unexpected behavior, including random reboots of the host system. This issue arises from a failure to properly clear the capability for these instructions, which can lead to significant operational disruptions.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a temporary workaround, users can avoid using virtualized VMLOAD/VMSAVE instructions on Zen4 client SoCs until the kernel is updated. This may involve modifying system configurations or avoiding certain virtualization features that rely on these instructions.
Conclusion
The vulnerability CVE-2024-53114 in the Linux kernel poses a significant risk to systems using Zen4 client SoCs by allowing the use of problematic VMLOAD/VMSAVE instructions, leading to random reboots. Users are advised to update their kernel to the patched version to ensure system stability and security.
See every vulnerability recorded for linux →
FAQ
CVE-2024-53114 is a vulnerability in the Linux kernel related to the incorrect handling of virtualized VMLOAD/VMSAVE instructions on Zen4 client SoCs, which can lead to random host reboots.
You can use Vulert to monitor and alert for open-source vulnerabilities in your software. By using the Vulert playground, you can check if your application is affected by this vulnerability without needing to sign up.
The primary impact of this vulnerability is the risk of random reboots of the host system, which can disrupt services and lead to data loss or corruption.
Yes, a patch is available for the Linux kernel. Users should update to the fixed version to mitigate the vulnerability.
If an immediate update is not possible, avoid using virtualized VMLOAD/VMSAVE instructions on affected Zen4 client SoCs as a temporary workaround.
Related vulnerabilities
Recent vulnerabilities recorded for linux.
