CVE-2024-25743

In the Linux kernel through 6.9, an untrusted hypervisor can inject virtual interrupts 0 and 14 at any point in time and can trigger the SIGFPE signal handler in userspace applications. This affects AMD SEV-SNP and AMD SEV-ES.

Score

CVSS 3.1 7.1 High

Status

Deferred - cve@mitre.org

Published

2024-05-15

Last modified

2025-03-14

Weaknesses

CWE-20

Affected products

• Kernel (Linux)

References

• https://bugzilla.redhat.com/show_bug.cgi?id=2270836
• https://bugzilla.suse.com/show_bug.cgi?id=1223307
• https://www.amd.com/en/resources/product-security/bulletin/amd-sb-3008.html