CVE-2024-35801
Linux Kernel vulnerability analysis and mitigation

Overview

CVE-2024-35801 affects the Linux kernel's x86/fpu subsystem. The vulnerability was discovered when a synchronization issue was found between the per-CPU xfd_state cache and MSR_IA32_XFD values. The issue was introduced by previous commits that implemented caching of MSR_IA32_XFD values to avoid unnecessary writes to the MSR (Kernel Git).

Technical details

The vulnerability stems from a synchronization issue where during CPU hotplug, MSR_IA32_XFD is reset to init_fpstate.xfd to wipe out stale state, but the per-CPU cached xfd value is not reset accordingly. This desynchronization can cause xfd_update_state() to fail to update the MSR, potentially resulting in XRSTOR raising a #NM (Device Not Available) exception in kernel space, leading to a kernel crash (NVD). The vulnerability has been assigned a CVSS v3.1 base score of 7.8 (HIGH) with vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H (CISA-ADP).

Impact

When exploited, this vulnerability can cause a kernel crash due to XRSTOR raising a #NM exception in kernel space. This creates a denial of service condition affecting system stability and availability (NVD).

Exploitability

The vulnerability requires local access with low privileges and no user interaction to exploit. The attack complexity is considered low, making it relatively straightforward to trigger the vulnerability condition (CISA-ADP).

Mitigation and workarounds

The vulnerability has been fixed by introducing xfd_set_state() function to write xfd_state together with MSR_IA32_XFD, ensuring synchronization between the cached state and MSR value. This fix has been implemented in various kernel versions through patches (Kernel Git).

Additional resources


SourceThis report was generated using AI

Related Linux Kernel vulnerabilities:

CVE ID

Severity

Score

Technologies

Component name

CISA KEV exploit

Has fix

Published date

CVE-2026-80913NONEN/A
  • Linux Kernel logoLinux Kernel
  • linux
NoYesSep 04, 2026
CVE-2026-80905NONEN/A
  • Linux Kernel logoLinux Kernel
  • kernel
NoYesSep 04, 2026
CVE-2026-80898NONEN/A
  • Linux Kernel logoLinux Kernel
  • linux
NoYesSep 04, 2026
CVE-2026-80897NONEN/A
  • Linux Kernel logoLinux Kernel
  • linux
NoYesSep 04, 2026
CVE-2026-80892NONEN/A
  • Linux Kernel logoLinux Kernel
  • linux
NoYesSep 04, 2026

Free Vulnerability Assessment

Benchmark your Cloud Security Posture

Evaluate your cloud security practices across 9 security domains to benchmark your risk level and identify gaps in your defenses.

Request assessment

Get a personalized demo

Ready to see Wiz in action?

"Best User Experience I have ever seen, provides full visibility to cloud workloads."
David EstlickCISO
"Wiz provides a single pane of glass to see what is going on in our cloud environments."
Adam FletcherChief Security Officer
"We know that if Wiz identifies something as critical, it actually is."
Greg PoniatowskiHead of Threat and Vulnerability Management