CVE-2024-25742: Linux Kernel - hw: amd: Instruction raise #VC exception at exit
Summary
CVE-2024-25742: In the Linux kernel before 6.9, an untrusted hypervisor can inject virtual interrupt 29 (#VC) at any point in time and can trigger its handler. Affects linux versions < e3ef461af35a8c74f2f4ce6616491ddb355a208f. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The linux-libc-dev package is a development package that provides the C library headers for the Linux kernel. It is used to compile and build applications that interact with the kernel. The package is an essential component for developers working on Linux-based systems. However, the linux-libc-dev package is vulnerable to a specific issue in the Linux kernel.
Vulnerability Detail
The vulnerability, identified as CVE-2024-25742, affects the linux-libc-dev package in the Linux kernel before version 6.9. It allows an untrusted hypervisor to inject a virtual interrupt 29 (#VC) at any point in time and trigger its handler. This vulnerability impacts AMD SEV-SNP and AMD SEV-ES. Exploitation of this vulnerability can lead to various consequences, including potential privilege escalation or denial of service attacks.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
At present, no known workarounds are available for this vulnerability. It is highly recommended to apply the official fix by updating the linux-libc-dev package to the latest version.
Conclusion
In conclusion, the linux-libc-dev package in the Linux kernel is vulnerable to CVE-2024-25742. It is crucial to update the package to version 6.9 or later to mitigate the risk associated with this vulnerability. For further support and assistance in vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for linux →
FAQ
The linux-libc-dev package provides C library headers for the Linux kernel, allowing developers to compile and build applications that interact with the kernel.
The vulnerability allows an untrusted hypervisor to inject a virtual interrupt and trigger its handler, potentially leading to privilege escalation or denial of service attacks.
The vulnerability affects linux-libc-dev package versions before 6.9.
No, there are currently no known workarounds for this vulnerability. It is recommended to update the linux-libc-dev package to the latest version.
To update the linux-libc-dev package, follow the official instructions provided by the package maintainer or the Linux distribution.
Related vulnerabilities
Recent vulnerabilities recorded for linux.
