NVD Vulnerability Detail
Search Exploit, PoC
CVE-2024-44948
Summary

In the Linux kernel, the following vulnerability has been resolved:

x86/mtrr: Check if fixed MTRRs exist before saving them

MTRRs have an obsolete fixed variant for fine grained caching control
of the 640K-1MB region that uses separate MSRs. This fixed variant has
a separate capability bit in the MTRR capability MSR.

So far all x86 CPUs which support MTRR have this separate bit set, so it
went unnoticed that mtrr_save_state() does not check the capability bit
before accessing the fixed MTRR MSRs.

Though on a CPU that does not support the fixed MTRR capability this
results in a #GP. The #GP itself is harmless because the RDMSR fault is
handled gracefully, but results in a WARN_ON().

Add the missing capability check to prevent this.

Publication Date Sept. 5, 2024, 4:15 a.m.
Registration Date Sept. 5, 2024, noon
Last Update Sept. 5, 2024, 9:53 p.m.
Related information, measures and tools
Common Vulnerabilities List

JVN Vulnerability Information
Linux の Linux Kernel における脆弱性
Title Linux の Linux Kernel における脆弱性
Summary

Linux の Linux Kernel には、不特定の脆弱性が存在します。

Possible impacts サービス運用妨害 (DoS) 状態にされる可能性があります。 
Solution

ベンダより正式な対策が公開されています。ベンダ情報を参照して適切な対策を実施してください。

Publication Date Aug. 8, 2024, midnight
Registration Date Oct. 21, 2025, 10:58 a.m.
Last Update Oct. 21, 2025, 10:58 a.m.
Affected System
Linux
Linux Kernel 2.6.22 以上 4.19.320 未満
Linux Kernel 4.20 以上 5.4.282 未満
Linux Kernel 5.11 以上 5.15.165 未満
Linux Kernel 5.16 以上 6.1.105 未満
Linux Kernel 5.5 以上 5.10.224 未満
Linux Kernel 6.11
Linux Kernel 6.2 以上 6.6.46 未満
Linux Kernel 6.7 以上 6.10.5 未満
CVE (情報セキュリティ 共通脆弱性識別子)
CWE (共通脆弱性タイプ一覧)
ベンダー情報
Change Log
No Changed Details Date of change
1 [2025年10月21日]
  掲載
Oct. 21, 2025, 10:58 a.m.