CVE-2024-26990

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue is related to the Linux kernel's KVM (Kernel-based Virtual Machine) component, specifically the x86/mmu module. It involves incorrect calculations in certain functions, which can lead to a denial of service when exploited. The vulnerability is related to the write-protection of L2 SPTEs (Second-Level Page Table Entries) in the TDP MMU (Two-Dimensional Paging Memory Management Unit) when clearing dirty status. The TDP MMU must account for role-specific reasons for disabling D-bit dirty logging, and failing to write-protect TDP MMU SPTEs can cause writes made by L2 to not be reflected in the dirty log.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.