Riskcovery

CVE-2024-40989

KVM: arm64: Disassociate vcpus from redistributor region on teardown

State
Published
Severity
7.8 High
Published
Jul 12, 2024
Updated
Aug 5, 2026
Reserved
Jul 12, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

KVM: arm64: Disassociate vcpus from redistributor region on teardown

When tearing down a redistributor region, make sure we don't have any dangling pointer to that region stored in a vcpu.

Scores

CVSSScoreVectorSource
3.17.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HLinux

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • e5a35635464bc5304674b84ea42615a3fd0bd949 to before 68df4fc449fcc24347209e500ce26d5816705a77Affected
  • e5a35635464bc5304674b84ea42615a3fd0bd949 to before 48bb62859d47c5c4197a8c01128d0fa4f46ee58cAffected
  • e5a35635464bc5304674b84ea42615a3fd0bd949 to before 152b4123f21e6aff31cea01158176ad96a999c76Affected
  • e5a35635464bc5304674b84ea42615a3fd0bd949 to before 0d92e4a7ffd5c42b9fa864692f82476c0bf8bcc8Affected
LinuxLinux
  • 5.13Affected
  • before 5.13Not affected
  • 6.1.96 through 6.1.*Not affected
  • 6.6.36 through 6.6.*Not affected
  • 6.9.7 through 6.9.*Not affected
  • 6.10 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.