CVE-2024-25743

HighCVSS 7.1/10Last modified Jun 17, 2026

Description

In the Linux kernel through 6.9, an untrusted hypervisor can inject virtual interrupts 0 and 14 at any point in time and can trigger the SIGFPE signal handler in userspace applications. This affects AMD SEV-SNP and AMD SEV-ES.

Metrics

CVSS 3.1 7.1/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

Weakness enumeration

CWE-20

Affected software

No affected versions have been published.

Timeline

Published: May 15, 2024
Last modified: Jun 17, 2026
NVD status: Deferred

Related CVEs from 2024

CVE-2024-257448.8In the Linux kernel before 6.6.7, an untrusted VMM can trigger int80 syscall handling at any given point. This is related to arch/x86/coco/t CVE-2024-257468.8Stack Based Buffer Overflow vulnerability in Tenda AC9 v.3.0 with firmware version v.15.03.06.42_multi allows a remote attacker to execute a CVE-2024-257488.8A Stack Based Buffer Overflow vulnerability in tenda AC9 AC9 v.3.0 with firmware version v.15.03.06.42_multi allows a remote attacker to exe CVE-2024-25759.8A vulnerability, which was classified as critical, has been found in SourceCodester Employee Task Management System 1.0. Affected by this is CVE-2024-257519.8A Stack Based Buffer Overflow vulnerability in Tenda AC9 v.3.0 with firmware version v.15.03.06.42_multi allows a remote attacker to execute CVE-2024-257538.8Stack Based Buffer Overflow vulnerability in Tenda AC9 v.3.0 with firmware version v.15.03.06.42_multi allows a remote attacker to execute a CVE-2024-257568.0A Stack Based Buffer Overflow vulnerability in Tenda AC9 v.3.0 with firmware version v.15.03.06.42_multi allows a remote attacker to execute CVE-2024-25769.8A vulnerability, which was classified as critical, was found in SourceCodester Employee Task Management System 1.0. This affects an unknown CVE-2024-257635.5openNDS 10.2.0 is vulnerable to Use-After-Free via /openNDS/src/auth.c.CVE-2024-257676.5nanomq 0.21.2 contains a Use-After-Free vulnerability in /nanomq/nng/src/core/socket.c.CVE-2024-257687.5OpenDMARC 1.4.2 contains a null pointer dereference vulnerability in /OpenDMARC/libopendmarc/opendmarc_policy.c.CVE-2024-25779.8A vulnerability has been found in SourceCodester Employee Task Management System 1.0 and classified as critical. This vulnerability affects