CVE Database›Document archive›CVE-2024-35804

CVE-2024-35804

kernel: KVM: x86: Mark target gfn of emulated atomic instruction as dirty

Loading…

Severity

Low

Red Hat Product Security

5.5

CVSS 3.1

Review impact separately from score.

Published · May 17, 2024

Updated · October 30, 2026

Description

A flaw was found in the KVM (Kernel-based Virtual Machine) subsystem of the Linux kernel on x86 architectures. When emulating atomic operations on behalf of a guest, the hypervisor fails to mark modified memory pages as dirty. When a virtual machine undergoes live migration, this omission causes the host to miss memory updates, resulting in guest memory corruption and system instability.

Statement

This vulnerability is rated with a Low severity because it only triggers under very specific timing conditions during live migration and cannot be exploited to compromise or escape the host hypervisor. On x86 virtualization hosts, emulated atomic memory instructions are omitted from dirty page tracking logs during guest migration. Consequently, while an active guest might encounter memory inconsistencies after being migrated, host integrity and confidentiality remain intact.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CVSS 3.1 · 5.5
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-820 · Missing Synchronization