{"id":"CVE-2024-44948","revision":"3920218d5dd74b7dabcf9382d07e20e2","records":[{"revision":"3920218d5dd74b7dabcf9382d07e20e2","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2024-44948","aliases":[],"title":"x86/mtrr: Check if fixed MTRRs exist before saving them","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nx86/mtrr: Check if fixed MTRRs exist before saving them\n\nMTRRs have an obsolete fixed variant for fine grained caching control\nof the 640K-1MB region that uses separate MSRs. This fixed variant has\na separate capability bit in the MTRR capability MSR.\n\nSo far all x86 CPUs which support MTRR have this separate bit set, so it\nwent unnoticed that mtrr_save_state() does not check the capability bit\nbefore accessing the fixed MTRR MSRs.\n\nThough on a CPU that does not support the fixed MTRR capability this\nresults in a #GP.  The #GP itself is harmless because the RDMSR fault is\nhandled gracefully, but results in a WARN_ON().\n\nAdd the missing capability check to prevent this.","state":0,"publishedAt":"2024-09-04T18:35:48.98+00:00","modifiedAt":"2026-10-15T00:49:24.28+00:00","affected":[{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"unaffected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"arch/x86/kernel/cpu/mtrr/mtrr.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"2b1f6278d77c1f2f669346fc2bb48012b5e9495a\",\n                            \"lessThan\": \"34f36e6ee5bd7eff8b2adcd9fcaef369f752d82e\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"2b1f6278d77c1f2f669346fc2bb48012b5e9495a\",\n                            \"lessThan\": \"06c1de44d378ec5439db17bf476507d68589bfe9\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"2b1f6278d77c1f2f669346fc2bb48012b5e9495a\",\n                            \"lessThan\": \"450b6b22acdaac67a18eaf5ed498421ffcf10051\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"2b1f6278d77c1f2f669346fc2bb48012b5e9495a\",\n                            \"lessThan\": \"ca7d00c5656d1791e28369919e3e10febe9c3b16\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"2b1f6278d77c1f2f669346fc2bb48012b5e9495a\",\n                            \"lessThan\": \"8aa79dfb216b865e96ff890bc4ea71650f9bc8d7\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"2b1f6278d77c1f2f669346fc2bb48012b5e9495a\",\n                            \"lessThan\": \"8a90d3fc7c24608548d3a750671f9dac21d1a462\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"2b1f6278d77c1f2f669346fc2bb48012b5e9495a\",\n                            \"lessThan\": \"388f1c954019f253a8383f7eb733f38d541e10b6\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"2b1f6278d77c1f2f669346fc2bb48012b5e9495a\",\n                            \"lessThan\": \"919f18f961c03d6694aa726c514184f2311a4614\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        }\n                    ]\n                }"},{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"affected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"arch/x86/kernel/cpu/mtrr/mtrr.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"2.6.22\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"0\",\n                            \"lessThan\": \"2.6.22\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"4.19.320\",\n                            \"lessThanOrEqual\": \"4.19.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"5.4.282\",\n                            \"lessThanOrEqual\": \"5.4.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"5.10.224\",\n                            \"lessThanOrEqual\": \"5.10.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"5.15.165\",\n                            \"lessThanOrEqual\": \"5.15.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.1.105\",\n                            \"lessThanOrEqual\": \"6.1.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.6.46\",\n                            \"lessThanOrEqual\": \"6.6.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.10.5\",\n                            \"lessThanOrEqual\": \"6.10.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.11\",\n                            \"lessThanOrEqual\": \"*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"original_commit_for_fix\"\n                        }\n                    ]\n                }"}],"metrics":[],"references":["https://git.kernel.org/stable/c/34f36e6ee5bd7eff8b2adcd9fcaef369f752d82e","https://git.kernel.org/stable/c/06c1de44d378ec5439db17bf476507d68589bfe9","https://git.kernel.org/stable/c/450b6b22acdaac67a18eaf5ed498421ffcf10051","https://git.kernel.org/stable/c/ca7d00c5656d1791e28369919e3e10febe9c3b16","https://git.kernel.org/stable/c/8aa79dfb216b865e96ff890bc4ea71650f9bc8d7","https://git.kernel.org/stable/c/8a90d3fc7c24608548d3a750671f9dac21d1a462","https://git.kernel.org/stable/c/388f1c954019f253a8383f7eb733f38d541e10b6","https://git.kernel.org/stable/c/919f18f961c03d6694aa726c514184f2311a4614"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2024-44948","license":"CVE Program Terms of Use","key":"cve-program:CVE-2024-44948","identifiers":["CVE-2024-44948"]},"retained":false,"historicalAffected":[]}],"coverage":[]}