Linux kernel
cpe:2.3:a:linux:linux_kernel:*:*:*:*:*:*:*, +4 more
A vulnerability has been addressed in the Linux kernel related to the x86/AMD northbridge management. The issue arose because Xen hypervisor does not provide the MSR_FAM10H_MMIO_CONF_BASE model-specific register to all guest virtual machines. This omission led to a warning about unchecked access to the register, indicating a potential issue with how memory-mapped configuration ranges were being handled for certain devices. The vulnerability was likely exposed by recent changes that modified how Xen manages MSR accesses, potentially allowing for improper handling of device configuration areas.
The vulnerability could lead to incorrect management of memory-mapped configuration ranges, potentially causing issues with device handling or performance.
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.