CVE-2024-45818

Summary

CVE-2024-45818 is a vulnerability affecting the hypervisor's VGA memory access acceleration feature in HVM guests. When the VGA is in "standard" mode, an unusual locking discipline leaves a lock acquired past the function that acquired it. This results in a deadlock when emulating an instruction with two memory accesses that touch VGA memory. The initial analysis of this issue was incorrect, and the incomplete fix did not address the root cause. Since the logic has been removed in staging due to accidental disablement since Xen 4.7, this vulnerability will be mitigated by backporting the removal of most of the feature. Even with the feature disabled, the lock would still be acquired for any accesses to the VGA MMIO region.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.