NVD Vulnerability Detail

CVE-2024-50193

Summary	In the Linux kernel, the following vulnerability has been resolved: x86/entry_32: Clear CPU buffers after register restore in NMI return CPU buffers are currently cleared after call to exc_nmi, but before register state is restored. This may be okay for MDS mitigation but not for RDFS. Because RDFS mitigation requires CPU buffers to be cleared when registers don't have any sensitive data. Move CLEAR_CPU_BUFFERS after RESTORE_ALL_NMI.
Publication Date	Nov. 8, 2024, 3:15 p.m.
Registration Date	Nov. 9, 2024, 5 a.m.
Last Update	Nov. 8, 2024, 3:15 p.m.

Related information, measures and tools

No	URL	refsource	タグ
1	https://git.kernel.org/stable/c/6f44a5fc15b5cece0785bc07453db77d99b0a6de
2	https://git.kernel.org/stable/c/b6400eb0b347821efc57760221f8fb6d63b9548a
3	https://git.kernel.org/stable/c/43778de19d2ef129636815274644b9c16e78c66b
4	https://git.kernel.org/stable/c/227358e89703c344008119be7e8ffa3fdb5b92de
5	https://git.kernel.org/stable/c/64adf22c4bc73ede920baca5defefb70f190cdbc
6	https://git.kernel.org/stable/c/48a2440d0f20c826b884e04377ccc1e4696c84e9

Common Vulnerabilities List

JVN Vulnerability Information

Linux の Linux Kernel における脆弱性

Title	Linux の Linux Kernel における脆弱性
Summary	Linux の Linux Kernel には、不特定の脆弱性が存在します。
Possible impacts	情報を取得される、およびサービス運用妨害 (DoS) 状態にされる可能性があります。
Solution	ベンダより正式な対策が公開されています。ベンダ情報を参照して適切な対策を実施してください。
Publication Date	Oct. 8, 2024, midnight
Registration Date	Dec. 2, 2024, 3:32 p.m.
Last Update	Aug. 21, 2025, 1:33 p.m.

Affected System

Linux

Linux Kernel 5.10.228 未満

Linux Kernel 5.11 以上 5.15.169 未満

Linux Kernel 5.16 以上 6.1.114 未満

Linux Kernel 6.12

Linux Kernel 6.2 以上 6.6.58 未満

Linux Kernel 6.8 以上 6.11.5 未満

CVE (情報セキュリティ共通脆弱性識別子)

No	Name	URL
Common Vulnerabilities and Exposures (CVE)
1	CVE-2024-50193	https://www.cve.org/CVERecord?id=CVE-2024-50193
National Vulnerability Database (NVD)
2	CVE-2024-50193	https://nvd.nist.gov/vuln/detail/CVE-2024-50193

CWE (共通脆弱性タイプ一覧)

No	Name	URL
JVNDB
1	CWE-noinfo	https://www.ipa.go.jp/security/vuln/scap/cwe.html

ベンダー情報

No	Name	URL
Kernel.org git repositories
1	x86/entry_32: Clear CPU buffers after register restore in NMI return (227358e)	https://git.kernel.org/stable/c/227358e89703c344008119be7e8ffa3fdb5b92de
2	x86/entry_32: Clear CPU buffers after register restore in NMI return (43778de)	https://git.kernel.org/stable/c/43778de19d2ef129636815274644b9c16e78c66b
3	x86/entry_32: Clear CPU buffers after register restore in NMI return (48a2440)	https://git.kernel.org/stable/c/48a2440d0f20c826b884e04377ccc1e4696c84e9
4	x86/entry_32: Clear CPU buffers after register restore in NMI return (64adf22)	https://git.kernel.org/stable/c/64adf22c4bc73ede920baca5defefb70f190cdbc
5	x86/entry_32: Clear CPU buffers after register restore in NMI return (6f44a5f)	https://git.kernel.org/stable/c/6f44a5fc15b5cece0785bc07453db77d99b0a6de
6	x86/entry_32: Clear CPU buffers after register restore in NMI return (b6400eb)	https://git.kernel.org/stable/c/b6400eb0b347821efc57760221f8fb6d63b9548a
Linux Kernel
7	Linux Kernel Archives	https://www.kernel.org

その他

No	Name	URL
ICS-CERT ADVISORY
1	ICSA-25-226-07	https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07
JVN
2	JVNVU#92169998	https://jvn.jp/vu/JVNVU92169998/index.html

Change Log

No	Changed Details	Date of change
1	[2024年12月02日] 掲載	Dec. 2, 2024, 3:32 p.m.
2	[2025年08月21日] 参考情報：JVN (JVNVU#92169998) を追加参考情報：ICS-CERT ADVISORY (ICSA-25-226-07) を追加	Aug. 21, 2025, 1:32 p.m.