CSIRTS // UNIFIED SECURITY ADVISORY FEEDSYS ● ONLINE · POWERED BY INTELFUSIONS.COM

← Back to feed

CVE-2024-43819: kvm: s390: Reject memory region operations for ucontrol VMs

mediumCVSS 5.5CVE-2024-43819

CSIRTS triage

vendor: Linuxproduct: Linux KernelPrivilege escalation
What
KVM on s390 fails to properly reject memory region operations for usercontrol VMs, allowing privilege escalation.
Who is affected
s390 systems running KVM with usercontrol VM support.
Urgency
Medium; privilege escalation requires local access to KVM.
Action
Apply kernel patches that enforce memory region operation rejection for ucontrol VMs.

AI-assisted analysis generated from the source advisory — verify against the original.

⚡ Watch Linux Kernel

Get an email when a new Linux Kernel advisory drops — max one per day, one-click unsubscribe.

Details

Source
Microsoft Security Response Center (INTL · vendor-psirt · site)
Severity
medium — CVSS 5.5
Published
2026-08-06
Exploitation
Not in CISA KEV at last sync

Original advisory: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43819

Exploitation outlook

EPSS (FIRST.org) estimates each CVE’s probability of exploitation in the next 30 days — here is the CSIRTS.com read on those numbers.

Referenced CVEs

CVECSIRTS overviewExternal
CVE-2024-43819coverage & exploitation statusNVD · CVE.org

Recent advisories for kvm

A cluster of recent advisories against the same product widens the attack surface — attackers routinely chain freshly published CVEs on one product, so review these together.

More from Microsoft Security Response Center