CVE-2024-53114

CVE-2024-53114

Medium · published December 2, 2024

CVSS v3.1
5.5
EPSS
0%
Percentile
13.9
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

x86/CPU/AMD: Clear virtualized VMLOAD/VMSAVE on Zen4 client

A number of Zen4 client SoCs advertise the ability to use virtualized

VMLOAD/VMSAVE, but using these instructions is reported to be a cause

of a random host reboot.

These instructions aren't intended to be advertised on Zen4 client

so clear the capability.

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00237 · 13.9th percentile
Published
2024-12-02T19:15Z
Affected products (8)
ProductVersionsFixed in
linux/linux_kernel< 6.11.106.11.10
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
References (3)
EPSS history
Timeline
  • 02 DEC 13:44Z
    x86/CPU/AMD: Clear virtualized VMLOAD/VMSAVE on Zen4 client
    cvelistv5