Lucene search
Ubuntu.comUB:CVE-2024-25742HistoryMay 17, 2024 - 12:00 a.m.
CVE-2024-25742
2024-05-1700:00:00
ubuntu.com
ubuntu.com
18
cve
2024
25742
unix
security
vulnerability
AI Score
6.8
Confidence
High
In the Linux kernel before 6.9, an untrusted hypervisor can inject virtual
interrupt 29 (#VC) at any point in time and can trigger its handler. This
affects AMD SEV-SNP and AMD SEV-ES.
Notes
| Author | Note |
|---|---|
| rodrigo-zaiden | also known as WeSee. |
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| ubuntu | 22.04 | noarch | linux | < 5.15.0-117.127 | UNKNOWN |
| ubuntu | 24.04 | noarch | linux | < 6.8.0-39.39 | UNKNOWN |
| ubuntu | 22.04 | noarch | linux-aws | < 5.15.0-1066.72 | UNKNOWN |
| ubuntu | 24.04 | noarch | linux-aws | < 6.8.0-1012.13 | UNKNOWN |
| ubuntu | 20.04 | noarch | linux-aws-5.15 | < any | UNKNOWN |
| ubuntu | 22.04 | noarch | linux-aws-6.5 | < any | UNKNOWN |
| ubuntu | 22.04 | noarch | linux-azure | < any | UNKNOWN |
| ubuntu | 24.04 | noarch | linux-azure | < any | UNKNOWN |
| ubuntu | 20.04 | noarch | linux-azure-5.15 | < any | UNKNOWN |
| ubuntu | 22.04 | noarch | linux-azure-6.5 | < any | UNKNOWN |
References
ahoi-attacks.github.io/wesee/
ahoi-attacks.github.io/wesee/wesee_oakland24.pdf
launchpad.net/bugs/cve/CVE-2024-25742
nvd.nist.gov/vuln/detail/CVE-2024-25742
security-tracker.debian.org/tracker/CVE-2024-25742
ubuntu.com/security/notices/USN-6921-1
ubuntu.com/security/notices/USN-6921-2
ubuntu.com/security/notices/USN-6923-1
www.amd.com/en/resources/product-security/bulletin/amd-sb-3008.html
www.cve.org/CVERecord?id=CVE-2024-25742
Related
osv
osv
CVE-2024-25742
2024-05-17 22:15:07
ovmf-202405-1.1 on GA media
2024-09-13 00:00:00
Moderate: kernel security and bug fix update
2024-05-10 14:32:32
nvd
nvd
CVE-2024-25742
2024-05-17 22:15:07
vulnrichment
vulnrichment
CVE-2024-25742
1976-01-01 00:00:00
redhatcve
redhatcve
CVE-2024-25742
2024-04-08 10:51:32
cvelist
cvelist
CVE-2024-25742
1976-01-01 00:00:00
debiancve
debiancve
CVE-2024-25742
2024-05-17 22:15:07
cve
cve
CVE-2024-25742
2024-05-17 22:15:07
redhat
redhat
(RHSA-2024:2628) Moderate: kernel-rt security and bug fix update
2024-05-01 00:08:21
(RHSA-2024:2627) Moderate: kernel security and bug fix update
2024-05-01 00:08:14
(RHSA-2024:2758) Moderate: kernel security and bug fix update
2024-05-08 00:02:33
nessus
nessus
RHEL 9 : kernel (RHSA-2024:2627)
2024-05-01 00:00:00
RHEL 9 : kernel-rt (RHSA-2024:2628)
2024-04-30 00:00:00
Oracle Linux 9 : kernel (ELSA-2024-2758)
2024-05-09 00:00:00
amd
amd
Disrupting AMD SEV-SNP on Linux® With Interrupts
2024-04-05 00:00:00
oraclelinux
oraclelinux
kernel security and bug fix update
2024-05-08 00:00:00
kernel security, bug fix, and enhancement update
2024-05-23 00:00:00
ubuntucve
ubuntucve
CVE-2024-25743
2024-05-15 00:00:00
rocky
rocky
kernel security and bug fix update
2024-05-10 14:32:32
kernel security, bug fix, and enhancement update
2024-06-14 13:59:16
kernel-rt security and bug fix update
2024-06-14 13:59:36
ubuntu
ubuntu
Linux kernel vulnerabilities
2024-07-30 00:00:00
Linux kernel vulnerabilities
2024-07-29 00:00:00
Linux kernel vulnerabilities
2024-07-30 00:00:00
openvas
openvas
Ubuntu: Security Advisory (USN-6923-1)
2024-07-30 00:00:00
Ubuntu: Security Advisory (USN-6923-2)
2024-07-31 00:00:00
Ubuntu: Security Advisory (USN-6921-1)
2024-07-30 00:00:00
ibm
ibm
Security Bulletin: IBM QRadar SIEM contains multiple kernel vulnerabilities
2024-06-07 15:32:38
Security Bulletin: Multiple Vulnerabilities in IBM CloudPak for AIOps
2024-06-26 16:06:34