CVE-2024-53196

CVE-2024-53196 is a vulnerability in the Linux kernel's KVM (Kernel-based Virtual Machine) arm64 architecture. It arises when KVM attempts to retire an aborted MMIO (Memory-Mapped I/O) instruction, leading to a kernel warning. This issue specifically affects the Linux kernel. The vulnerability is rated Medium severity (CVSS 5.5) with a vector of AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H, indicating that a local attacker with low privileges can exploit it with low attack complexity, potentially leading to a denial of service. There is no impact on confidentiality or integrity. Currently, there is no evidence of active exploitation, nor is exploit code available on platforms like Metasploit, Nuclei, or ExploitDB. Community discussion and media coverage for this CVE are minimal, which is typical for a large percentage of reported vulnerabilities.