CVE-2024-46864

Summary

CVE-2024-46864 is a vulnerability affecting the Linux kernel where a new cpuhp state for hyperv initialization introduced in commit 9636be85cc5b was not properly handled. This resulted in the VP assist page not being reset during system shutdown, leading to memory corruption when the kexec kernel attempted to set up the VP assist page again. The issue causes a panic if the kexec kernel is using that memory elsewhere. The vulnerability has been resolved by removing hyperv_init_cpuhp entirely and using CPUHP_AP_HYPERV_ONLINE directly with cpuhp_remove_state(). This issue was originally addressed in commit dfe94d4086e4.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.