CVE-2024-50193

x86/entry_32: Clear CPU buffers after register restore in NMI return

High · published November 8, 2024

CVSS v3.1
7.1
EPSS
0%
Percentile
11.2
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

x86/entry_32: Clear CPU buffers after register restore in NMI return

CPU buffers are currently cleared after call to exc_nmi, but before

register state is restored. This may be okay for MDS mitigation but not for

RDFS. Because RDFS mitigation requires CPU buffers to be cleared when

registers don't have any sensitive data.

Move CLEAR_CPU_BUFFERS after RESTORE_ALL_NMI.

The record
Technical detail
CVSS v3.1
7.1 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00215 · 11.2th percentile
Published
2024-11-08T05:54Z
EPSS history
Timeline
  • 08 NOV 05:54Z
    x86/entry_32: Clear CPU buffers after register restore in NMI return
    cvelistv5