CVE-2024-25743

Published: 15 May 2024

In the Linux kernel through 6.9, an untrusted hypervisor can inject virtual interrupts 0 and 14 at any point in time and can trigger the SIGFPE signal handler in userspace applications. This affects AMD SEV-SNP and AMD SEV-ES.

Notes

as CVE-2024-25744, this may be known as Heckler.
as of 2024-07-12, there isn't a known fix applied upstream
for this specific CVE.
previously, it was identified that f35e46631b28a63ca3887d7afef1a65a5544da52
is the fix commit for this, but this commit is likely more related to
CVE-2024-25744 specifically (int 0x80 interruption).
also, it was identified that e3ef461af35a8c74f2f4ce6616491ddb355a208f
would fix this, but this is related to CVE-2024-25742 (#VC instruction)

Status

References

• https://www.amd.com/en/resources/product-security/bulletin/amd-sb-3008.html
• https://www.cve.org/CVERecord?id=CVE-2024-25743
• https://ahoi-attacks.github.io/heckler/
• https://ahoi-attacks.github.io/heckler/heckler_usenix24.pdf
• NVD
• Launchpad
• Debian