Threats tagged 'ghsa-mjgv-4grg-pfrr'

CVE-2024-50115 is a vulnerability in the Linux kernel's KVM nested SVM (nSVM) implementation. It involves improper handling of bits 4:0 of the nCR3 register when loading Page Directory Pointer Table Entries (PDPTEs) from memory. These bits should be ignored according to processor architecture specifications, but the nSVM code does not enforce this, potentially leading to an out-of-bounds memory read. This flaw is specific to the nested SVM flow and does not affect the standard KVM PDPTR loading. The vulnerability has a high severity score of 7.1 CVSS v3.1.