CVE-2024-35791

A security vulnerability was identified in the Linux kernel's Kernel-based Virtual Machine subsystem (KVM), specifically affecting the Secure Virtual Machine (SVM) feature used on AMD processors. The issue arises from a use-after-free condition in the svm_register_enc_region() function, which can lead to system instability or potential exploitation.

This vulnerability is rated as Moderate severity because exploitation requires local access with privileges to interact with the KVM subsystem, constraining the blast radius primarily to host denial of service. The flaw resides within the AMD virtualization (SVM) handling of encrypted memory regions in the Linux kernel hypervisor. Deployments running on non-AMD architectures or environments that do not utilize hardware-assisted virtualization with memory encryption are unaffected.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.