What’s Vulnerable › Vulnerabilities

CVE-2024-53114: x86/CPU/AMD: Clear virtualized VMLOAD/VMSAVE on Zen4 client

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-12-02 · updated 2026-10-30

Description

In the Linux kernel, the following vulnerability has been resolved: x86/CPU/AMD: Clear virtualized VMLOAD/VMSAVE on Zen4 client A number of Zen4 client SoCs advertise the ability to use virtualized VMLOAD/VMSAVE, but using these instructions is reported to be a cause of a random host reboot. These instructions aren't intended to be advertised on Zen4 client so clear the capability.

Affected products

• Linux kernel: before 6.11.10; 6.12-rc1, 6.12-rc2, 6.12-rc3, 6.12-rc4, 6.12-rc5, 6.12-rc6 (+1) — fixed in 6.11.10
• Linux: 4.13 — fixed in 6.12

How to fix

Upgrade to a fixed version: Linux kernel 6.11.10; Linux 6.12. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/00c713f84f477a85e524f34aad8fbd11a1c051f0
• https://git.kernel.org/stable/c/a5ca1dc46a6b610dd4627d8b633d6c84f9724ef0
• https://git.kernel.org/stable/c/cf79df17706605032461f1ebde730b4391d1ca9c
• https://git.kernel.org/stable/c/e7c81a79fe1fa28c1825fb786bd3c749af471b0b

Get alerted when CVE-2024-53114 or the next vulnerability affects your stack