CVE-2024-53241

MEDIUM

Linux Kernel < 5.10.232, 5.11.0-5.15.175, 5.16.0-6.1.121, 6.2.0-6.6.67, 6.7.0-6.12.6 - RCE via Xen PV IRET Hypercall

Title source: llm
STIX 2.1

Description

In the Linux kernel, the following vulnerability has been resolved: x86/xen: don't do PV iret hypercall through hypercall page Instead of jumping to the Xen hypercall page for doing the iret hypercall, directly code the required sequence in xen-asm.S. This is done in preparation of no longer using hypercall page at all, as it has shown to cause problems with speculation mitigations. This is part of XSA-466 / CVE-2024-53241.

References (13)

Core 13
Core References

Scores

CVSS v3 5.5
EPSS 0.0031
EPSS Percentile 23.3%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Details

Status published
Products (21)
linux/Kernel 2.6.27 - 5.10.232linux
linux/Kernel 5.11.0 - 5.15.175linux
linux/Kernel 5.16.0 - 6.1.121linux
linux/Kernel 6.2.0 - 6.6.67linux
linux/Kernel 6.7.0 - 6.12.6linux
Linux/Linux < 2.6.27
Linux/Linux 2.6.27
Linux/Linux 5.10.232 - 5.10.*
Linux/Linux 5.15.175 - 5.15.*
Linux/Linux 6.1.121 - 6.1.*
... and 11 more
Published Dec 24, 2024
Tracked Since Feb 18, 2026