CVE-2024-35980

A vulnerability affecting the Linux kernel on ARM64 systems, specifically in its KVM (Kernel-based Virtual Machine) module during live migration was found. An issue in the TLB (Translation Lookaside Buffer) invalidation process causes incomplete flushing of entries due to a miscalculated operand. This can lead to VM crashes on the destination host, as some memory changes are improperly handled.

This vulnerability is rated as Moderate severity because it is constrained to ARM64 hardware running KVM hypervisors and only manifests during live virtual machine migrations, resulting in availability or integrity loss of the migrating guest rather than host compromise. The issue requires hypervisor-level migration actions to trigger and cannot be directly leveraged by an unprivileged guest to escape or execute arbitrary code on the underlying host kernel. Non-ARM architectures and environments that do not perform KVM live migration are unaffected.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.