Vulnerability · Published May 15, 2024 · Assigned by mitre

CVE-2024-25743

High 7.1

In plain English

A high-severity improper input validation in the bpftool package (AlmaLinux). There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 16% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)7.1High
Exploit odds (30 days)0.2%top 83.9% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

In the Linux kernel through 6.9, an untrusted hypervisor can inject virtual interrupts 0 and 14 at any point in time and can trigger the SIGFPE signal handler in userspace applications. This affects AMD SEV-SNP and AMD SEV-ES.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
AlmaLinux:8bpftool4.18.0-553.el8_10ALSA-2024:3138
AlmaLinux:9bpftool7.3.0-427.16.1.el9_4ALSA-2024:2758
AlmaLinux:8kernel4.18.0-553.el8_10ALSA-2024:3138
AlmaLinux:9kernel5.14.0-427.16.1.el9_4ALSA-2024:2758
AlmaLinux:9kernel-64k5.14.0-427.16.1.el9_4ALSA-2024:2758
AlmaLinux:9kernel-64k-core5.14.0-427.16.1.el9_4ALSA-2024:2758
AlmaLinux:9kernel-64k-debug5.14.0-427.16.1.el9_4ALSA-2024:2758
AlmaLinux:9kernel-64k-debug-core5.14.0-427.16.1.el9_4ALSA-2024:2758
AlmaLinux:9kernel-64k-debug-devel5.14.0-427.16.1.el9_4ALSA-2024:2758
AlmaLinux:9kernel-64k-debug-devel-matched5.14.0-427.16.1.el9_4ALSA-2024:2758
AlmaLinux:9kernel-64k-debug-modules5.14.0-427.16.1.el9_4ALSA-2024:2758
AlmaLinux:9kernel-64k-debug-modules-core5.14.0-427.16.1.el9_4ALSA-2024:2758
AlmaLinux:9kernel-64k-debug-modules-extra5.14.0-427.16.1.el9_4ALSA-2024:2758
AlmaLinux:9kernel-64k-devel5.14.0-427.16.1.el9_4ALSA-2024:2758
AlmaLinux:9kernel-64k-devel-matched5.14.0-427.16.1.el9_4ALSA-2024:2758
AlmaLinux:9kernel-64k-modules5.14.0-427.16.1.el9_4ALSA-2024:2758
AlmaLinux:9kernel-64k-modules-core5.14.0-427.16.1.el9_4ALSA-2024:2758
AlmaLinux:9kernel-64k-modules-extra5.14.0-427.16.1.el9_4ALSA-2024:2758
AlmaLinux:8kernel-abi-stablelists4.18.0-553.el8_10ALSA-2024:3138
AlmaLinux:9kernel-abi-stablelists5.14.0-427.16.1.el9_4ALSA-2024:2758
AlmaLinux:8kernel-core4.18.0-553.el8_10ALSA-2024:3138
AlmaLinux:9kernel-core5.14.0-427.16.1.el9_4ALSA-2024:2758
AlmaLinux:8kernel-cross-headers4.18.0-553.el8_10ALSA-2024:3138
AlmaLinux:9kernel-cross-headers5.14.0-427.16.1.el9_4ALSA-2024:2758
AlmaLinux:8kernel-debug4.18.0-553.el8_10ALSA-2024:3138
AlmaLinux:9kernel-debug5.14.0-427.16.1.el9_4ALSA-2024:2758
AlmaLinux:8kernel-debug-core4.18.0-553.el8_10ALSA-2024:3138
AlmaLinux:9kernel-debug-core5.14.0-427.16.1.el9_4ALSA-2024:2758
AlmaLinux:8kernel-debug-devel4.18.0-553.el8_10ALSA-2024:3138
AlmaLinux:9kernel-debug-devel5.14.0-427.16.1.el9_4ALSA-2024:2758
AlmaLinux:9kernel-debug-devel-matched5.14.0-427.16.1.el9_4ALSA-2024:2758
AlmaLinux:8kernel-debug-modules4.18.0-553.el8_10ALSA-2024:3138
AlmaLinux:9kernel-debug-modules5.14.0-427.16.1.el9_4ALSA-2024:2758
AlmaLinux:9kernel-debug-modules-core5.14.0-427.16.1.el9_4ALSA-2024:2758
AlmaLinux:8kernel-debug-modules-extra4.18.0-553.el8_10ALSA-2024:3138
AlmaLinux:9kernel-debug-modules-extra5.14.0-427.16.1.el9_4ALSA-2024:2758
AlmaLinux:9kernel-debug-uki-virt5.14.0-427.16.1.el9_4ALSA-2024:2758
AlmaLinux:8kernel-devel4.18.0-553.el8_10ALSA-2024:3138
AlmaLinux:9kernel-devel5.14.0-427.16.1.el9_4ALSA-2024:2758
AlmaLinux:9kernel-devel-matched5.14.0-427.16.1.el9_4ALSA-2024:2758
AlmaLinux:8kernel-doc4.18.0-553.el8_10ALSA-2024:3138
AlmaLinux:9kernel-doc5.14.0-427.16.1.el9_4ALSA-2024:2758
AlmaLinux:8kernel-headers4.18.0-553.el8_10ALSA-2024:3138
AlmaLinux:9kernel-headers5.14.0-427.16.1.el9_4ALSA-2024:2758
AlmaLinux:8kernel-modules4.18.0-553.el8_10ALSA-2024:3138
AlmaLinux:9kernel-modules5.14.0-427.16.1.el9_4ALSA-2024:2758
AlmaLinux:9kernel-modules-core5.14.0-427.16.1.el9_4ALSA-2024:2758
AlmaLinux:8kernel-modules-extra4.18.0-553.el8_10ALSA-2024:3138
AlmaLinux:9kernel-modules-extra5.14.0-427.16.1.el9_4ALSA-2024:2758
AlmaLinux:8kernel-rt4.18.0-553.rt7.342.el8_10ALSA-2024:2950
AlmaLinux:9kernel-rt5.14.0-427.16.1.el9_4ALSA-2024:2758
AlmaLinux:8kernel-rt-core4.18.0-553.rt7.342.el8_10ALSA-2024:2950
AlmaLinux:9kernel-rt-core5.14.0-427.16.1.el9_4ALSA-2024:2758
AlmaLinux:8kernel-rt-debug4.18.0-553.rt7.342.el8_10ALSA-2024:2950
AlmaLinux:9kernel-rt-debug5.14.0-427.16.1.el9_4ALSA-2024:2758
AlmaLinux:8kernel-rt-debug-core4.18.0-553.rt7.342.el8_10ALSA-2024:2950
AlmaLinux:9kernel-rt-debug-core5.14.0-427.16.1.el9_4ALSA-2024:2758
AlmaLinux:8kernel-rt-debug-devel4.18.0-553.rt7.342.el8_10ALSA-2024:2950
AlmaLinux:9kernel-rt-debug-devel5.14.0-427.16.1.el9_4ALSA-2024:2758
AlmaLinux:8kernel-rt-debug-kvm4.18.0-553.rt7.342.el8_10ALSA-2024:2950
AlmaLinux:8kernel-rt-debug-modules4.18.0-553.rt7.342.el8_10ALSA-2024:2950
AlmaLinux:9kernel-rt-debug-modules5.14.0-427.16.1.el9_4ALSA-2024:2758
AlmaLinux:9kernel-rt-debug-modules-core5.14.0-427.16.1.el9_4ALSA-2024:2758
AlmaLinux:8kernel-rt-debug-modules-extra4.18.0-553.rt7.342.el8_10ALSA-2024:2950
AlmaLinux:9kernel-rt-debug-modules-extra5.14.0-427.16.1.el9_4ALSA-2024:2758
AlmaLinux:8kernel-rt-devel4.18.0-553.rt7.342.el8_10ALSA-2024:2950
AlmaLinux:9kernel-rt-devel5.14.0-427.16.1.el9_4ALSA-2024:2758
AlmaLinux:8kernel-rt-kvm4.18.0-553.rt7.342.el8_10ALSA-2024:2950
AlmaLinux:8kernel-rt-modules4.18.0-553.rt7.342.el8_10ALSA-2024:2950
AlmaLinux:9kernel-rt-modules5.14.0-427.16.1.el9_4ALSA-2024:2758
AlmaLinux:9kernel-rt-modules-core5.14.0-427.16.1.el9_4ALSA-2024:2758
AlmaLinux:8kernel-rt-modules-extra4.18.0-553.rt7.342.el8_10ALSA-2024:2950
AlmaLinux:9kernel-rt-modules-extra5.14.0-427.16.1.el9_4ALSA-2024:2758
AlmaLinux:8kernel-tools4.18.0-553.el8_10ALSA-2024:3138
AlmaLinux:9kernel-tools5.14.0-427.16.1.el9_4ALSA-2024:2758
AlmaLinux:8kernel-tools-libs4.18.0-553.el8_10ALSA-2024:3138
AlmaLinux:9kernel-tools-libs5.14.0-427.16.1.el9_4ALSA-2024:2758
AlmaLinux:8kernel-tools-libs-devel4.18.0-553.el8_10ALSA-2024:3138
AlmaLinux:9kernel-tools-libs-devel5.14.0-427.16.1.el9_4ALSA-2024:2758
AlmaLinux:9kernel-uki-virt5.14.0-427.16.1.el9_4ALSA-2024:2758
AlmaLinux:8kernel-zfcpdump4.18.0-553.el8_10ALSA-2024:3138
AlmaLinux:9kernel-zfcpdump5.14.0-427.16.1.el9_4ALSA-2024:2758
AlmaLinux:8kernel-zfcpdump-core4.18.0-553.el8_10ALSA-2024:3138
AlmaLinux:9kernel-zfcpdump-core5.14.0-427.16.1.el9_4ALSA-2024:2758
AlmaLinux:8kernel-zfcpdump-devel4.18.0-553.el8_10ALSA-2024:3138
AlmaLinux:9kernel-zfcpdump-devel5.14.0-427.16.1.el9_4ALSA-2024:2758
AlmaLinux:9kernel-zfcpdump-devel-matched5.14.0-427.16.1.el9_4ALSA-2024:2758
AlmaLinux:8kernel-zfcpdump-modules4.18.0-553.el8_10ALSA-2024:3138
AlmaLinux:9kernel-zfcpdump-modules5.14.0-427.16.1.el9_4ALSA-2024:2758
AlmaLinux:9kernel-zfcpdump-modules-core5.14.0-427.16.1.el9_4ALSA-2024:2758
AlmaLinux:8kernel-zfcpdump-modules-extra4.18.0-553.el8_10ALSA-2024:3138
AlmaLinux:9kernel-zfcpdump-modules-extra5.14.0-427.16.1.el9_4ALSA-2024:2758
AlmaLinux:9libperf5.14.0-427.16.1.el9_4ALSA-2024:2758
AlmaLinux:8perf4.18.0-553.el8_10ALSA-2024:3138
AlmaLinux:9perf5.14.0-427.16.1.el9_4ALSA-2024:2758
AlmaLinux:8python3-perf4.18.0-553.el8_10ALSA-2024:3138
AlmaLinux:9python3-perf5.14.0-427.16.1.el9_4ALSA-2024:2758
AlmaLinux:9rtla5.14.0-427.16.1.el9_4ALSA-2024:2758
AlmaLinux:9rv5.14.0-427.16.1.el9_4ALSA-2024:2758
Debian:12linuxno fix listedDEBIAN-CVE-2024-25743
Debian:13linux6.9.7-1DEBIAN-CVE-2024-25743
Debian:14linux6.9.7-1DEBIAN-CVE-2024-25743
Rocky Linux:8kernel0:4.18.0-553.el8_10RLSA-2024:3138
Rocky Linux:9kernel0:5.14.0-427.16.1.el9_4RLSA-2024:2758
Rocky Linux:8kernel-rt0:4.18.0-553.rt7.342.el8_10RLSA-2024:2950
Ubuntu:22.04:LTSlinuxno fix listedUBUNTU-CVE-2024-25743
Ubuntu:24.04:LTSlinuxno fix listedUBUNTU-CVE-2024-25743
Ubuntu:22.04:LTSlinux-allwinner-5.19no fix listedUBUNTU-CVE-2024-25743
Ubuntu:22.04:LTSlinux-awsno fix listedUBUNTU-CVE-2024-25743
Ubuntu:24.04:LTSlinux-awsno fix listedUBUNTU-CVE-2024-25743
Ubuntu:22.04:LTSlinux-aws-5.19no fix listedUBUNTU-CVE-2024-25743
Ubuntu:22.04:LTSlinux-aws-6.2no fix listedUBUNTU-CVE-2024-25743
Ubuntu:22.04:LTSlinux-aws-6.5no fix listedUBUNTU-CVE-2024-25743
Ubuntu:22.04:LTSlinux-aws-6.8no fix listedUBUNTU-CVE-2024-25743
Ubuntu:22.04:LTSlinux-azureno fix listedUBUNTU-CVE-2024-25743
Ubuntu:24.04:LTSlinux-azureno fix listedUBUNTU-CVE-2024-25743
Ubuntu:22.04:LTSlinux-azure-5.19no fix listedUBUNTU-CVE-2024-25743
Ubuntu:24.04:LTSlinux-azure-6.11no fix listedUBUNTU-CVE-2024-25743
Ubuntu:22.04:LTSlinux-azure-6.2no fix listedUBUNTU-CVE-2024-25743
Ubuntu:22.04:LTSlinux-azure-6.5no fix listedUBUNTU-CVE-2024-25743
Ubuntu:22.04:LTSlinux-azure-6.8no fix listedUBUNTU-CVE-2024-25743
Ubuntu:22.04:LTSlinux-azure-fdeno fix listedUBUNTU-CVE-2024-25743
Ubuntu:24.04:LTSlinux-azure-fdeno fix listedUBUNTU-CVE-2024-25743
Ubuntu:25.10linux-azure-fdeno fix listedUBUNTU-CVE-2024-25743
Ubuntu:26.04:LTSlinux-azure-fdeno fix listedUBUNTU-CVE-2024-25743
Ubuntu:22.04:LTSlinux-azure-fde-5.19no fix listedUBUNTU-CVE-2024-25743
Ubuntu:24.04:LTSlinux-azure-fde-6.17no fix listedUBUNTU-CVE-2024-25743
Ubuntu:22.04:LTSlinux-azure-fde-6.2no fix listedUBUNTU-CVE-2024-25743
Ubuntu:22.04:LTSlinux-azure-fde-6.8no fix listedUBUNTU-CVE-2024-25743
Ubuntu:24.04:LTSlinux-azure-fde-7.0no fix listedUBUNTU-CVE-2024-25743
Ubuntu:24.04:LTSlinux-azure-nvidiano fix listedUBUNTU-CVE-2024-25743
Ubuntu:22.04:LTSlinux-gcpno fix listedUBUNTU-CVE-2024-25743
Ubuntu:24.04:LTSlinux-gcpno fix listedUBUNTU-CVE-2024-25743
Ubuntu:22.04:LTSlinux-gcp-5.19no fix listedUBUNTU-CVE-2024-25743
Ubuntu:24.04:LTSlinux-gcp-6.11no fix listedUBUNTU-CVE-2024-25743
Ubuntu:22.04:LTSlinux-gcp-6.2no fix listedUBUNTU-CVE-2024-25743
Ubuntu:22.04:LTSlinux-gcp-6.5no fix listedUBUNTU-CVE-2024-25743
Ubuntu:22.04:LTSlinux-gcp-6.8no fix listedUBUNTU-CVE-2024-25743
Ubuntu:22.04:LTSlinux-gkeno fix listedUBUNTU-CVE-2024-25743
Ubuntu:24.04:LTSlinux-gkeno fix listedUBUNTU-CVE-2024-25743
Ubuntu:26.04:LTSlinux-gkeno fix listedUBUNTU-CVE-2024-25743
Ubuntu:22.04:LTSlinux-gkeopno fix listedUBUNTU-CVE-2024-25743
Ubuntu:24.04:LTSlinux-gkeopno fix listedUBUNTU-CVE-2024-25743
Ubuntu:22.04:LTSlinux-hwe-5.19no fix listedUBUNTU-CVE-2024-25743
Ubuntu:24.04:LTSlinux-hwe-6.11no fix listedUBUNTU-CVE-2024-25743
Ubuntu:22.04:LTSlinux-hwe-6.2no fix listedUBUNTU-CVE-2024-25743
Ubuntu:22.04:LTSlinux-hwe-6.5no fix listedUBUNTU-CVE-2024-25743
Ubuntu:22.04:LTSlinux-hwe-6.8no fix listedUBUNTU-CVE-2024-25743
Ubuntu:22.04:LTSlinux-ibmno fix listedUBUNTU-CVE-2024-25743
Ubuntu:24.04:LTSlinux-ibmno fix listedUBUNTU-CVE-2024-25743
Ubuntu:26.04:LTSlinux-ibmno fix listedUBUNTU-CVE-2024-25743
Ubuntu:22.04:LTSlinux-ibm-6.8no fix listedUBUNTU-CVE-2024-25743
Ubuntu:24.04:LTSlinux-intelno fix listedUBUNTU-CVE-2024-25743
Ubuntu:22.04:LTSlinux-intel-iot-realtimeno fix listedUBUNTU-CVE-2024-25743
Ubuntu:22.04:LTSlinux-intel-iotgno fix listedUBUNTU-CVE-2024-25743
Ubuntu:22.04:LTSlinux-kvmno fix listedUBUNTU-CVE-2024-25743
Ubuntu:22.04:LTSlinux-lowlatencyno fix listedUBUNTU-CVE-2024-25743
Ubuntu:24.04:LTSlinux-lowlatencyno fix listedUBUNTU-CVE-2024-25743
Ubuntu:22.04:LTSlinux-lowlatency-hwe-5.19no fix listedUBUNTU-CVE-2024-25743
Ubuntu:24.04:LTSlinux-lowlatency-hwe-6.11no fix listedUBUNTU-CVE-2024-25743
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.2no fix listedUBUNTU-CVE-2024-25743
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.5no fix listedUBUNTU-CVE-2024-25743
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.8no fix listedUBUNTU-CVE-2024-25743
Ubuntu:22.04:LTSlinux-nvidiano fix listedUBUNTU-CVE-2024-25743
Ubuntu:24.04:LTSlinux-nvidiano fix listedUBUNTU-CVE-2024-25743
Ubuntu:26.04:LTSlinux-nvidiano fix listedUBUNTU-CVE-2024-25743
Ubuntu:24.04:LTSlinux-nvidia-6.11no fix listedUBUNTU-CVE-2024-25743
Ubuntu:22.04:LTSlinux-nvidia-6.2no fix listedUBUNTU-CVE-2024-25743
Ubuntu:22.04:LTSlinux-nvidia-6.5no fix listedUBUNTU-CVE-2024-25743
Ubuntu:22.04:LTSlinux-nvidia-6.8no fix listedUBUNTU-CVE-2024-25743
Ubuntu:24.04:LTSlinux-nvidia-7.0no fix listedUBUNTU-CVE-2024-25743
Ubuntu:26.04:LTSlinux-nvidia-bosno fix listedUBUNTU-CVE-2024-25743
Ubuntu:24.04:LTSlinux-nvidia-lowlatencyno fix listedUBUNTU-CVE-2024-25743
Ubuntu:22.04:LTSlinux-nvidia-tegrano fix listedUBUNTU-CVE-2024-25743
Ubuntu:24.04:LTSlinux-nvidia-tegrano fix listedUBUNTU-CVE-2024-25743
Ubuntu:22.04:LTSlinux-nvidia-tegra-igxno fix listedUBUNTU-CVE-2024-25743
Ubuntu:22.04:LTSlinux-oem-5.17no fix listedUBUNTU-CVE-2024-25743
Ubuntu:22.04:LTSlinux-oem-6.0no fix listedUBUNTU-CVE-2024-25743
Ubuntu:22.04:LTSlinux-oem-6.1no fix listedUBUNTU-CVE-2024-25743
Ubuntu:24.04:LTSlinux-oem-6.11no fix listedUBUNTU-CVE-2024-25743
Ubuntu:22.04:LTSlinux-oem-6.5no fix listedUBUNTU-CVE-2024-25743
Ubuntu:24.04:LTSlinux-oem-6.8no fix listedUBUNTU-CVE-2024-25743
Ubuntu:22.04:LTSlinux-oracleno fix listedUBUNTU-CVE-2024-25743
Ubuntu:24.04:LTSlinux-oracleno fix listedUBUNTU-CVE-2024-25743
Ubuntu:22.04:LTSlinux-oracle-6.5no fix listedUBUNTU-CVE-2024-25743
Ubuntu:22.04:LTSlinux-oracle-6.8no fix listedUBUNTU-CVE-2024-25743
Ubuntu:22.04:LTSlinux-raspino fix listedUBUNTU-CVE-2024-25743
Ubuntu:24.04:LTSlinux-raspino fix listedUBUNTU-CVE-2024-25743
Ubuntu:24.04:LTSlinux-raspi-realtimeno fix listedUBUNTU-CVE-2024-25743
Ubuntu:22.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2024-25743
Ubuntu:24.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2024-25743
Ubuntu:25.10linux-realtimeno fix listedUBUNTU-CVE-2024-25743
Ubuntu:26.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2024-25743
Ubuntu:26.10linux-realtimeno fix listedUBUNTU-CVE-2024-25743
Ubuntu:22.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2024-25743
Ubuntu:24.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2024-25743
Ubuntu:22.04:LTSlinux-riscv-5.19no fix listedUBUNTU-CVE-2024-25743
Ubuntu:22.04:LTSlinux-riscv-6.5no fix listedUBUNTU-CVE-2024-25743
Ubuntu:22.04:LTSlinux-riscv-6.8no fix listedUBUNTU-CVE-2024-25743
Ubuntu:22.04:LTSlinux-starfive-5.19no fix listedUBUNTU-CVE-2024-25743

Affected products (as reported)

VendorProductVersions
n/a n/a n/a

Weakness: CWE-20 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

References