Answer in brief
CVE-2024-44948 records a Unknown severity vulnerability in x86/mtrr: Check if fixed MTRRs exist before saving them. The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic), Siemens/SIMATIC S7-1500 TM MFP - GNU/Linux subsystem (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
A CVSS score is not reported in the current record. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic), Siemens/SIMATIC S7-1500 TM MFP - GNU/Linux subsystem (generic). Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=2b1f6278d77c1f2f669346fc2bb48012b5e9495a <34f36e6ee5bd7eff8b2adcd9fcaef369f752d82e || >=2b1f6278d77c1f2f669346fc2bb48012b5e9495a <06c1de44d378ec5439db17bf476507d68589bfe9 || >=2b1f6278d77c1f2f669346fc2bb48012b5e9495a <450b6b22acdaac67a18eaf5ed498421ffcf10051 || >=2b1f6278d77c1f2f669346fc2bb48012b5e9495a <ca7d00c5656d1791e28369919e3e10febe9c3b16 || >=2b1f6278d77c1f2f669346fc2bb48012b5e9495a <8aa79dfb216b865e96ff890bc4ea71650f9bc8d7 || >=2b1f6278d77c1f2f669346fc2bb48012b5e9495a <8a90d3fc7c24608548d3a750671f9dac21d1a462 || >=2b1f6278d77c1f2f669346fc2bb48012b5e9495a <388f1c954019f253a8383f7eb733f38d541e10b6 || >=2b1f6278d77c1f2f669346fc2bb48012b5e9495a <919f18f961c03d6694aa726c514184f2311a4614 | 34f36e6ee5bd7eff8b2adcd9fcaef369f752d82e, 06c1de44d378ec5439db17bf476507d68589bfe9, 450b6b22acdaac67a18eaf5ed498421ffcf10051, ca7d00c5656d1791e28369919e3e10febe9c3b16, 8aa79dfb216b865e96ff890bc4ea71650f9bc8d7, 8a90d3fc7c24608548d3a750671f9dac21d1a462, 388f1c954019f253a8383f7eb733f38d541e10b6, 919f18f961c03d6694aa726c514184f2311a4614 |
| Linux/Linuxgeneric | 2.6.22 | Not reported |
| Siemens/SIMATIC S7-1500 TM MFP - GNU/Linux subsystemgeneric | >=0 <V1.1.1 | V1.1.1 |
Published upstream
Sep 4, 2024
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Oct 15, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Oct 15, 2026
In the Linux kernel, the following vulnerability has been resolved: x86/mtrr: Check if fixed MTRRs exist before saving them MTRRs have an obsolete fixed variant for fine grained caching control of the 640K-1MB region that uses separate MSRs. This fixed variant has a separate capability bit in the MTRR capability MSR. So far all x86 CPUs which support MTRR have this separate bit set, so it went unnoticed that mtrr_save_state() does not check the capability bit before accessing the fixed MTRR MSRs. Though on a CPU that does not support the fixed MTRR capability this results in a #GP. The #GP itself is harmless because the RDMSR fault is handled gracefully, but results in a WARN_ON(). Add the missing capability check to prevent this.
Quoted source text, attributed separately from HOL analysis.