CVE-2024-55881

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.74

Description The issue is related to the KVM: x86 component in the Linux kernel, specifically with the complete hypercall exit() function. It affects guests with protected state, such as SEV-ES and SEV-SNP. The problem arises when detecting 64-bit hypercalls, as the vCPU state needed for detection is unavailable. This leads to a warning when a specific hypercall is generated via VMGEXIT. The estimated number of potentially affected devices is not provided.

Recommendations For Linux kernel versions prior to 6.6.74, update to version 6.6.74 or later to resolve the issue. As a temporary workaround, consider restricting the use of the complete hypercall exit() function until a patch is available. Additionally, be cautious when using the KVM HC MAP GPA RANGE hypercall via VMGEXIT to avoid triggering the warning.