CVE-2024-26992

In the Linux kernel, the following vulnerability has been resolved:

KVM: x86/pmu: Disable support for adaptive PEBS

The Linux kernel CVE team has assigned CVE-2024-26992 to this issue.

Upstream advisory: https://lore.kernel.org/linux-cve-announce/2024050144-CVE-2024-26992-4f0e@gregkh/T

This vulnerability is rated as having a Low security impact because standard virtualization management stacks, including QEMU-KVM in Red Hat Enterprise Linux, do not enable or support virtualized Processor Event-Based Sampling (PEBS) for guest virtual machines. Exploitation of this flaw requires a hypervisor that explicitly configures and exposes adaptive PEBS to the guest vCPU, which is not present in standard supported configurations. Consequently, the potential for a guest to read host Last Branch Record registers and address information is not accessible in default production deployments.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.