CVE-2024-44943 addresses a kernel warning in the Linux kernel's memory management (mm) subsystem, specifically related to the get_user_pages (GUP) function when pinning memory in CMA (Contiguous Memory Allocator) areas, particularly during the launch of SEV (Secure Encrypted Virtualization) virtual machines. The vulnerability arises from the misuse of try_grab_folio, leading to a kernel warning and potential system instability. The vulnerability is rated as Medium severity (CVSS 5.5) with an attack vector of Local, low attack complexity, and no user interaction required. While it does not directly impact confidentiality or integrity, it can lead to high availability impact (A:H) due to the kernel warning and potential system instability. Currently, there is no evidence of active exploitation, and no public exploit code (Metasploit, Nuclei, ExploitDB) is available. Community discussion and media coverage are minimal, indicating a low level of public attention.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
>= 6.6, < 6.6.47CPE matchmatch criteria | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | ||
>= 6.7, < 6.10CPE matchmatch criteria | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | ||
6.10CPE matchmatch criteria | cpe:2.3:o:linux:linux_kernel:6.10:rc1:*:*:*:*:*:* | ||
6.10CPE matchmatch criteria | cpe:2.3:o:linux:linux_kernel:6.10:rc2:*:*:*:*:*:* | ||
6.10CPE matchmatch criteria | cpe:2.3:o:linux:linux_kernel:6.10:rc3:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.