CVE-2024-56721: x86/CPU/AMD: Terminate the erratum_1386_microcode array
In the Linux kernel, the following vulnerability has been resolved:
x86/CPU/AMD: Terminate the erratum1386microcode array
The erratum1386microcode array requires an empty entry at the end. Otherwise x86matchcpuwithstepping() will continue iterate the array after it ended.
Add an empty entry to erratum1386microcode to its end.
Other sources
This CVE was automatically created from a reference found in an email or other text. If you are reading this, then this CVE entry is probably erroneous, since this text should be replaced by the official CVE description automatically.
— Launchpad
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.223-1Fixed in 5.10.234-1Fixed in 6.1.129-1Fixed in 6.1.135-1Fixed in 6.12.25-1
Event History
Frequently Asked Questions
What is the severity of CVE-2024-56721?
CVE-2024-56721 has a medium severity due to the potential for improper handling of CPU microcode which could lead to unexpected behavior.
How do I fix CVE-2024-56721?
To fix CVE-2024-56721, upgrade your Linux kernel to versions later than 6.11.11 or 6.12.2.
What systems are affected by CVE-2024-56721?
CVE-2024-56721 affects Linux kernel versions from 6.10 up to 6.11.11 and from 6.12 up to 6.12.2.
Is there a known exploit for CVE-2024-56721?
As of now, there are no public exploits reported for CVE-2024-56721.
What causes the vulnerability CVE-2024-56721?
CVE-2024-56721 is caused by an improperly sized erratum_1386_microcode array that lacks an empty entry, leading to potential out-of-bounds access.