01 Record

CVE-2024-53241

x86/xen: don't do PV iret hypercall through hypercall page

UnratedPUBLISHEDCNA: Linux

CNA base scoreUnratedNo CNA CVSS vector

View raw JSON

02 Description

x86/xen: don't do PV iret hypercall through hypercall page

03 Exploitation and scoring

Exploitation: Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
SSVC decision: Not assessed by CISA
EPSS probability: 0.31% probability of exploitation activity in the next 30 days.
EPSS percentile: Ranks above 23.5% of scored records. A rank, not a probability.
NVD base score: 5.5 (CVSS v3.x), scored by the NVD independently of the CNA.
NVD CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
NVD analysis status: Modified. NVD last modified this record on 2026-06-17.
Red Hat severity: Moderate. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2024-12-24 09:24Z1 YR AGO

Last updated

2026-05-11 20:53Z3 MO AGO

Reserved

2024-11-19

Assigning CNA

Linux

Record state

PUBLISHED

Severity

Not rated by the issuing CNA

CNA CVSS vector

Not published by the issuing CNA

Weaknesses

CWE-119Improper Restriction of Operations within the Bounds of a Memory BufferClass

Data version

5.2

Document digest

7e84a732fe6cd4b1d0adce1541fb1271427aed2639a6696ee601b659f71f572b

05 Affected products

VendorProductVersionsPlatforms

LinuxLinuxcdacc1278b12d929f9a053c245ff3d16eb7af9f8 to < 05df6e6cd9a76b778aee33c3c18c9f3b3566d4a5, cdacc1278b12d929f9a053c245ff3d16eb7af9f8 to < c7b4cfa6213a44fa48714186dfdf125072d036e3, cdacc1278b12d929f9a053c245ff3d16eb7af9f8 to < fa719857f613fed94a79da055b13ca51214c694f, cdacc1278b12d929f9a053c245ff3d16eb7af9f8 to < 82c211ead1ec440dbf81727e17b03b5e3c44b93d, cdacc1278b12d929f9a053c245ff3d16eb7af9f8 to < f7c3fdad0a474062d566aae3289d490d7e702d30, cdacc1278b12d929f9a053c245ff3d16eb7af9f8 to < a2796dff62d6c6bfc5fbebdf2bee0d5ac0438906, 2.6.27—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/05df6e6cd9a76b778aee33c3c18c9f3b3566d4a5
git.kernel.orghttps://git.kernel.org/stable/c/c7b4cfa6213a44fa48714186dfdf125072d036e3
git.kernel.orghttps://git.kernel.org/stable/c/fa719857f613fed94a79da055b13ca51214c694f
git.kernel.orghttps://git.kernel.org/stable/c/82c211ead1ec440dbf81727e17b03b5e3c44b93d
git.kernel.orghttps://git.kernel.org/stable/c/f7c3fdad0a474062d566aae3289d490d7e702d30
git.kernel.orghttps://git.kernel.org/stable/c/a2796dff62d6c6bfc5fbebdf2bee0d5ac0438906
xenbits.xen.orghttp://xenbits.xen.org/xsa/advisory-466.html
www.openwall.comhttp://www.openwall.com/lists/oss-security/2024/12/17/2
www.openwall.comhttp://www.openwall.com/lists/oss-security/2024/12/23/1
www.openwall.comhttp://www.openwall.com/lists/oss-security/2025/01/05/1
www.openwall.comhttp://www.openwall.com/lists/oss-security/2025/01/05/2
lists.debian.orghttps://lists.debian.org/debian-lts-announce/2025/03/msg00001.html
lists.debian.orghttps://lists.debian.org/debian-lts-announce/2025/03/msg00002.html

01 Record index

CVE-2024-53241

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References

02 Records

CVE-2024-53241

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References