CVE-2024-35801

In the Linux kernel, the following vulnerability has been resolved:

x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD

The Linux kernel CVE team has assigned CVE-2024-35801 to this issue.

Upstream advisory: https://lore.kernel.org/linux-cve-announce/2024051738-CVE-2024-35801-8038@gregkh/T

Red Hat has evaluated this vulnerability as having a Low severity impact because triggering the condition requires CPU hotplug operations on hardware platforms supporting extended feature disable (XFD). Unprivileged local users cannot perform CPU hotplug actions, requiring privileged access or specific hypervisor-level interventions to initiate the event that leads to kernel instability. As a result, the risk of unprivileged denial-of-service in typical enterprise environments remains minimal.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.