CVE-2024-38610

🗓️ 19 Jun 2024 13:56:12Reported by LinuxType

cve🔗 web.nvd.nist.gov👁 100 Views🌐 WEB

In Linux kernel, vulnerability fixed in acrn driver for PFNMAP PTE check

Reporter	Title	Published	Views	Family All 95
AstraLinux	Astra Linux – Vulnerability in Linux 6.1	11 Feb 202507:35	–	astralinux
BDU FSTEC	Vulnerabilities of components such as drivers, virt, and acrn in the Linux operating system, which allow attackers to increase their privileges within the system	25 Dec 202400:00	–	bdu_fstec
CNNVD	Linux kernel security vulnerabilities	19 Jun 202400:00	–	cnnvd
Cvelist	CVE-2024-38610 drivers/virt/acrn: fix PFNMAP PTE checks in acrn_vm_ram_map()	19 Jun 202413:56	–	cvelist
Debian CVE	CVE-2024-38610	19 Jun 202413:56	–	debiancve
Hewlett-Packard	HP ThinPro 8.1 SP7 Security Updates	3 Jun 202500:00	–	hp
Mageia	Updated kernel kmod-xtables-addons kmod-virtualbox dwarves packages fix security vulnerabilities	13 Jul 202407:54	–	mageia
Mageia	Updated kernel-linus packages fix security vulnerabilities	14 Jul 202405:23	–	mageia
Tenable Nessus	NewStart CGSL MAIN 7.02 : kernel Multiple Vulnerabilities (NS-SA-2025-0118)	25 Jul 202500:00	–	nessus
Tenable Nessus	Photon OS 5.0: Linux PHSA-2024-5.0-0305	24 Jul 202400:00	–	nessus

NVD

Vulners

CNA

Node

linux linux_kernelRange5.15.33–5.15.161

linux linux_kernelRange5.16.19–5.17

linux linux_kernelRange5.17.2–6.1.93

linux linux_kernelRange6.2–6.6.33

linux linux_kernelRange6.7–6.8.12

linux linux_kernelRange6.9–6.9.3

[
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "unaffected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "drivers/virt/acrn/mm.c"
    ],
    "versions": [
      {
        "version": "b9c43aa0b18da5619aac347d54cb67fe30d1f884",
        "lessThan": "5c6705aa47b5b78d7ad36fea832bb69caa5bf49a",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "8a6e85f75a83d16a71077e41f2720c691f432002",
        "lessThan": "afeb0e69627695f759fc73c39c1640dbf8649b32",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "8a6e85f75a83d16a71077e41f2720c691f432002",
        "lessThan": "e873f36ec890bece26ecce850e969917bceebbb6",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "8a6e85f75a83d16a71077e41f2720c691f432002",
        "lessThan": "4c4ba3cf3a15ccfbaf787d0296fa42cdb00da9b4",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "8a6e85f75a83d16a71077e41f2720c691f432002",
        "lessThan": "2c8d6e24930b8ef7d4a81787627c559ae0e0d3bb",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "8a6e85f75a83d16a71077e41f2720c691f432002",
        "lessThan": "3d6586008f7b638f91f3332602592caa8b00b559",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "149d5fb7e0124c3763e92edd1fde19417f4d2d09",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "02098ac42b7ff055ec72cd083ee1eb0a23481a19",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "5.15.33",
        "lessThan": "5.15.161",
        "status": "affected",
        "versionType": "semver"
      },
      {
        "version": "5.16.19",
        "lessThan": "5.17",
        "status": "affected",
        "versionType": "semver"
      },
      {
        "version": "5.17.2",
        "lessThan": "5.18",
        "status": "affected",
        "versionType": "semver"
      }
    ]
  },
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "affected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "drivers/virt/acrn/mm.c"
    ],
    "versions": [
      {
        "version": "5.18",
        "status": "affected"
      },
      {
        "version": "0",
        "lessThan": "5.18",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "5.15.161",
        "lessThanOrEqual": "5.15.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.1.93",
        "lessThanOrEqual": "6.1.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.6.33",
        "lessThanOrEqual": "6.6.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.8.12",
        "lessThanOrEqual": "6.8.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.9.3",
        "lessThanOrEqual": "6.9.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.10",
        "lessThanOrEqual": "*",
        "status": "unaffected",
        "versionType": "original_commit_for_fix"
      }
    ]
  }
]

Source	Link
git	www.git.kernel.org/stable/c/4c4ba3cf3a15ccfbaf787d0296fa42cdb00da9b4
git	www.git.kernel.org/stable/c/afeb0e69627695f759fc73c39c1640dbf8649b32
git	www.git.kernel.org/stable/c/3d6586008f7b638f91f3332602592caa8b00b559
git	www.git.kernel.org/stable/c/2c8d6e24930b8ef7d4a81787627c559ae0e0d3bb
git	www.git.kernel.org/stable/c/e873f36ec890bece26ecce850e969917bceebbb6
git	www.git.kernel.org/stable/c/5c6705aa47b5b78d7ad36fea832bb69caa5bf49a

Parameter	Position	Path	Description	CWE
ACRN_MEM_ACCESS_WRITE check	path	drivers/virt/acrn/acrn_vm_ram_map()	Fix PFNMAP PTE checks in acrn_vm_ram_map to prevent dangerous follow_pte() usage by validating write permissions, refcounted pages, and contiguous PFN ranges across the mapped area.	CWE-416
reject refcounted pages	path	drivers/virt/acrn/acrn_vm_ram_map()	Fix PFNMAP PTE checks in acrn_vm_ram_map to prevent dangerous follow_pte() usage by validating write permissions, refcounted pages, and contiguous PFN ranges across the mapped area.	CWE-416
loop over all involved PTEs to ensure PFN range is contiguous	path	drivers/virt/acrn/acrn_vm_ram_map()	Fix PFNMAP PTE checks in acrn_vm_ram_map to prevent dangerous follow_pte() usage by validating write permissions, refcounted pages, and contiguous PFN ranges across the mapped area.	CWE-416

17 Jun 2026 07:40Current

6.6Medium risk

Vulners AI Score6.6

CVSS 3.17.8

EPSS0.00213

SSVC

CWE-416