CVE-2024-47896

Summary

CVE-2024-47896 is a newly disclosed vulnerability that affects kernel software running inside Guest Virtual Machines (VMs). The issue allows an attacker to exploit the shared memory between the Guest VM and the GPU Firmware to write data outside the designated virtualised GPU memory. This could potentially result in unauthorised access or data corruption within the Guest VM environment. It is essential that virtualisation software vendors release patches to mitigate this issue promptly to prevent potential attacks. Users are advised to apply these patches as soon as they become available to ensure the security of their Guest VMs.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.