CVE-2024-49886

A flaw was found in the Linux kernel. A local attacker with privileges to manage virtual machines could exploit this vulnerability by attaching a specific Intel Speed Select Technology (ISST) PCI device to a virtual machine. This action triggers a memory error known as a slab-out-of-bounds, which can cause the system to crash. The primary consequence of this flaw is a denial of service, making the system unavailable.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

To mitigate this vulnerability, prevent the isst_if_common kernel module from loading. This can be achieved by creating a modprobe configuration file.

1. Create a file named /etc/modprobe.d/disable-isst.conf with the following content:

   install isst_if_common /bin/true
   

2. Reboot the system for the changes to take effect.

This mitigation will disable the ISST functionality. If ISST is required, this mitigation may impact system performance or features.