CVE-2024-36953 KVM: arm64: vgic-v2: Check for non-NULL vCPU in vgic_v2_parse_attr()
A missing null check in the Linux kernel's KVM arm64 vgic-v2 driver allows a local attacker to cause a denial of service via a null pointer dereference.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2024-36953?
CVE-2024-36953 is a medium-severity vulnerability in Debian Debian Linux, published on 30 May 2024. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
In the Linux kernel, the following vulnerability has been resolved:
KVM: arm64: vgic-v2: Check for non-NULL vCPU in vgic_v2_parse_attr()
vgic_v2_parse_attr() is responsible for finding the vCPU that matches the user-provided CPUID, which (of course) may not be valid. If the ID is invalid, kvm_get_vcpu_by_id() returns NULL, which isn't handled gracefully.
Similar to the GICv3 uaccess flow, check that kvm_get_vcpu_by_id() actually returns something and fail the ioctl if not.
Weakness: CWE-476
Which versions are affected by CVE-2024-36953?
It affects 2 products.
Products include Debian Debian Linux, Linux kernel.
How do I fix CVE-2024-36953?
Apply the vendor's patch.
Is CVE-2024-36953 being exploited?
There is no known exploitation of CVE-2024-36953 in the wild and no public exploit code.
Other vulnerabilities in Debian Debian Linux
Sources
Also known as BELL-CVE-2024-36953, DEBIAN-CVE-2024-36953, UBUNTU-CVE-2024-36953.