CVE-2024-35804
kernel: KVM: x86: Mark target gfn of emulated atomic instruction as dirty
Severity
LowRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · May 17, 2024
Updated · October 30, 2026
Description
A flaw was found in the KVM (Kernel-based Virtual Machine) subsystem of the Linux kernel on x86 architectures. When emulating atomic operations on behalf of a guest, the hypervisor fails to mark modified memory pages as dirty. When a virtual machine undergoes live migration, this omission causes the host to miss memory updates, resulting in guest memory corruption and system instability.
Statement
This vulnerability is rated with a Low severity because it only triggers under very specific timing conditions during live migration and cannot be exploited to compromise or escape the host hypervisor. On x86 virtualization hosts, emulated atomic memory instructions are omitted from dirty page tracking logs during guest migration. Consequently, while an active guest might encounter memory inconsistencies after being migrated, host integrity and confidentiality remain intact.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE-820 · Missing Synchronization