CVE-2024-44948

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.50

Description The issue is related to the x86/mtrr component of the Linux kernel, where the function mtrr save state() does not check the capability bit before accessing the fixed MTRR MSRs. This can result in a #GP fault on CPUs that do not support the fixed MTRR capability, although the fault is handled gracefully and only results in a WARN ON(). The vulnerability is related to an obsolete fixed variant of MTRRs used for fine-grained caching control of the 640K-1MB region.

Recommendations To resolve the issue, update the Linux kernel to version 6.6.50 or later. As a temporary workaround, consider adding a capability check before accessing the fixed MTRR MSRs to prevent the #GP fault.