CVE-2024-26990

In the Linux kernel, the following vulnerability has been resolved:

KVM: x86/mmu: Write-protect L2 SPTEs in TDP MMU when clearing dirty status

The Linux kernel CVE team has assigned CVE-2024-26990 to this issue.

Upstream advisory: https://lore.kernel.org/linux-cve-announce/2024050143-CVE-2024-26990-0a1f@gregkh/T

This vulnerability is rated as Low severity for Red Hat Enterprise Linux because it requires an uncommon nested virtualization scenario and causes inaccurate dirty memory tracking rather than arbitrary code execution or host privilege escalation. In typical enterprise virtualization deployments, hosts do not expose nested hypervisor capabilities to guests, and the flaw only manifests when a virtual machine runs subordinate guests under specific hardware logging conditions. Consequently, the flaw primarily impacts memory state consistency during guest migrations, without granting unauthorized access to the host or permitting direct kernel denial of service.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.