CVE-2024-11149: OpenBSD vmm GDTR limits
Published Dec 6, 2024
·Updated
In OpenBSD 7.4 before errata 014, vmm(4) did not restore GDTR limits properly on Intel (VMX) CPUs.
Affected Software
16 affected components
OpenBSD OpenBSD<7.4
OpenBSD OpenBSD<7.4
OpenBSD OpenBSD=7.4
OpenBSD OpenBSD=7.4-errata_001
OpenBSD OpenBSD=7.4-errata_002
OpenBSD OpenBSD=7.4-errata_003
OpenBSD OpenBSD=7.4-errata_004
OpenBSD OpenBSD=7.4-errata_005
OpenBSD OpenBSD=7.4-errata_006
OpenBSD OpenBSD=7.4-errata_007
OpenBSD OpenBSD=7.4-errata_008
OpenBSD OpenBSD=7.4-errata_009
OpenBSD OpenBSD=7.4-errata_010
OpenBSD OpenBSD=7.4-errata_011
OpenBSD OpenBSD=7.4-errata_012
OpenBSD OpenBSD=7.4-errata_013
Remediation
Event History
Dec 6, 2024
CVE Published
via MITRE·01:56 AM
Data Sourced
via MITRE·01:56 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·02:15 AM
RemedyDescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2024-11149?
CVE-2024-11149 has a severity rating that indicates it can lead to potential system instability or security breaches related to virtualization.
2
How do I fix CVE-2024-11149?
To fix CVE-2024-11149, ensure that your OpenBSD installation is updated with errata 014 or later.
3
What systems are affected by CVE-2024-11149?
CVE-2024-11149 affects OpenBSD versions up to but not including 7.4.
4
What kind of issue is CVE-2024-11149?
CVE-2024-11149 is a vulnerability in the vmm(4) component that improperly handles GDTR limits on Intel VMX CPUs.
5
Is there a patch available for CVE-2024-11149?
Yes, a patch is available for CVE-2024-11149 as part of OpenBSD's errata updates.