CVE-2024-50112: x86/lam: Disable ADDRESS_MASKING in most cases
In the Linux kernel, the following vulnerability has been resolved:
x86/lam: Disable ADDRESSMASKING in most cases
Linear Address Masking (LAM) has a weakness related to transient execution as described in the SLAM paper[1]. Unless Linear Address Space Separation (LASS) is enabled this weakness may be exploitable.
Until kernel adds support for LASS[2], only allow LAM for COMPILETEST, or when speculation mitigations have been disabled at compile time, otherwise keep LAM disabled.
There are no processors in market that support LAM yet, so currently nobody is affected by this issue.
[1] SLAM: https://download.vusec.net/papers/slamsp24.pdf [2] LASS: https://lore.kernel.org/lkml/20230609183632.48706-1-alexander.shishkin@linux.intel.com/
[ dhansen: update SPECULATIONMITIGATIONS -> CPUMITIGATIONS ]
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-50112?
CVE-2024-50112 is categorized as a moderate severity vulnerability in the Linux kernel.
How do I fix CVE-2024-50112?
To fix CVE-2024-50112, update your Linux kernel version to the latest stable release that is beyond the vulnerable versions.
Which versions of the Linux kernel are affected by CVE-2024-50112?
CVE-2024-50112 affects Linux kernel versions from 6.7 to 6.6.59, including specific release candidates of 6.12.
What type of vulnerability is CVE-2024-50112 related to?
CVE-2024-50112 is related to a weakness in the Linear Address Masking mechanism tied to transient execution.
Is CVE-2024-50112 exploitable remotely?
CVE-2024-50112 may have exploitation potential depending on the system configuration and usage context.