# CVE-2024-50072: linux: In the Linux kernel, the following vulnerability has been resolved: x86/bugs: Use code segment selector for VERW ope... CVE-2024-50072 is fixed in 35 products on 1 platform, first by DEBIAN-CVE-2024-50072, released October 29, 2024. It is not reported as exploited. Patch Radar priority: Routine. - Web page: https://patchblox.com/security/cve/CVE-2024-50072 - Priority: Routine - CVSS: 5.5 (medium) - EPSS: 0.0023 - CISA KEV: not listed - Exploited (vendor report): no - Publicly disclosed: no - Published: Oct 29, 2024 ## Description In the Linux kernel, the following vulnerability has been resolved: x86/bugs: Use code segment selector for VERW operand Robert Gill reported below #GP in 32-bit mode when dosemu software was executing vm86() system call: general protection fault: 0000 [#1] PREEMPT SMP CPU: 4 PID: 4610 Comm: dosemu.bin Not tainted 6.6.21-gentoo-x86 #1 Hardware name: Dell Inc. PowerEdge 1950/0H723K, BIOS 2.7.0 10/30/2010 EIP: restore_all_switch_stack+0xbe/0xcf EAX: 00000000 EBX: 00000000 ECX: 00000000 EDX: 00000000 ESI: 00000000 EDI: 00000000 EBP: 00000000 ESP: ff8affdc DS: 0000 ES: 0000 FS: 0000 GS: 0033 SS: 0068 EFLAGS: 00010046 CR0: 80050033 CR2: 00c2101c CR3: 04b6d000 CR4: 000406d0 Call Trace: show_regs+0x70/0x78 die_addr+0x29/0x70 exc_general_protection+0x13c/0x348 exc_bounds+0x98/0x98 handle_exception+0x14d/0x14d exc_bounds+0x98/0x98 restore_all_switch_stack+0xbe/0xcf exc_bounds+0x98/0x98 restore_all_switch_stack+0xbe/0xcf This only happens in 32-bit mode when VERW based mitigations like MDS/RFDS are enabled. This is because segment registers with an arbitrary user value can result in #GP when executing VERW. Intel SDM vol. 2C documents the following behavior for VERW instruction: #GP(0) - If a memory operand effective address is outside the CS, DS, ES, FS, or GS segment limit. CLEAR_CPU_BUFFERS macro executes VERW instruction before returning to user space. Use %cs selector to reference VERW operand. This ensures VERW will not #GP for an arbitrary user %ds. [ mingo: Fixed the SOB chain. ] ## Where it's fixed | Platform | Product | Fixed in | Fix | Released | |---|---|---|---|---| | Linux | bpftool amzn 2023 | 6.1.119-129.201.amzn2023 | [ALAS2023-2025-802](https://patchblox.com/security/data/fix/linux/alas2023-2025-802.md) | Jan 16, 2025 | | Linux | bpftool ol 8 | 0:5.15.0-303.171.5.2.el9uek | [ELSA-2024-12887](https://patchblox.com/security/data/fix/linux/elsa-2024-12887.md) | Dec 18, 2024 | | Linux | bpftool ol 9 | 0:5.15.0-303.171.5.2.el9uek | [ELSA-2024-12887](https://patchblox.com/security/data/fix/linux/elsa-2024-12887.md) | Dec 18, 2024 | | Linux | bpftool-debuginfo amzn 2023 | 6.1.119-129.201.amzn2023 | [ALAS2023-2025-802](https://patchblox.com/security/data/fix/linux/alas2023-2025-802.md) | Jan 16, 2025 | | Linux | kernel amzn 2023 | 6.1.119-129.201.amzn2023 | [ALAS2023-2025-802](https://patchblox.com/security/data/fix/linux/alas2023-2025-802.md) | Jan 16, 2025 | | Linux | kernel-debuginfo amzn 2023 | 6.1.119-129.201.amzn2023 | [ALAS2023-2025-802](https://patchblox.com/security/data/fix/linux/alas2023-2025-802.md) | Jan 16, 2025 | | Linux | kernel-debuginfo-common-aarch64 amzn 2023 | 6.1.119-129.201.amzn2023 | [ALAS2023-2025-802](https://patchblox.com/security/data/fix/linux/alas2023-2025-802.md) | Jan 16, 2025 | | Linux | kernel-debuginfo-common-x86_64 amzn 2023 | 6.1.119-129.201.amzn2023 | [ALAS2023-2025-802](https://patchblox.com/security/data/fix/linux/alas2023-2025-802.md) | Jan 16, 2025 | | Linux | kernel-devel amzn 2023 | 6.1.119-129.201.amzn2023 | [ALAS2023-2025-802](https://patchblox.com/security/data/fix/linux/alas2023-2025-802.md) | Jan 16, 2025 | | Linux | kernel-headers amzn 2023 | 6.1.119-129.201.amzn2023 | [ALAS2023-2025-802](https://patchblox.com/security/data/fix/linux/alas2023-2025-802.md) | Jan 16, 2025 | | Linux | kernel-libbpf amzn 2023 | 6.1.119-129.201.amzn2023 | [ALAS2023-2025-802](https://patchblox.com/security/data/fix/linux/alas2023-2025-802.md) | Jan 16, 2025 | | Linux | kernel-libbpf-devel amzn 2023 | 6.1.119-129.201.amzn2023 | [ALAS2023-2025-802](https://patchblox.com/security/data/fix/linux/alas2023-2025-802.md) | Jan 16, 2025 | | Linux | kernel-libbpf-static amzn 2023 | 6.1.119-129.201.amzn2023 | [ALAS2023-2025-802](https://patchblox.com/security/data/fix/linux/alas2023-2025-802.md) | Jan 16, 2025 | | Linux | kernel-livepatch-6.1.119-129.201 amzn 2023 | 1.0-0.amzn2023 | [ALAS2023-2025-802](https://patchblox.com/security/data/fix/linux/alas2023-2025-802.md) | Jan 16, 2025 | | Linux | kernel-modules-extra amzn 2023 | 6.1.119-129.201.amzn2023 | [ALAS2023-2025-802](https://patchblox.com/security/data/fix/linux/alas2023-2025-802.md) | Jan 16, 2025 | | Linux | kernel-modules-extra-common amzn 2023 | 6.1.119-129.201.amzn2023 | [ALAS2023-2025-802](https://patchblox.com/security/data/fix/linux/alas2023-2025-802.md) | Jan 16, 2025 | | Linux | kernel-tools amzn 2023 | 6.1.119-129.201.amzn2023 | [ALAS2023-2025-802](https://patchblox.com/security/data/fix/linux/alas2023-2025-802.md) | Jan 16, 2025 | | Linux | kernel-tools-debuginfo amzn 2023 | 6.1.119-129.201.amzn2023 | [ALAS2023-2025-802](https://patchblox.com/security/data/fix/linux/alas2023-2025-802.md) | Jan 16, 2025 | | Linux | kernel-tools-devel amzn 2023 | 6.1.119-129.201.amzn2023 | [ALAS2023-2025-802](https://patchblox.com/security/data/fix/linux/alas2023-2025-802.md) | Jan 16, 2025 | | Linux | kernel-uek ol 8 | 0:5.15.0-303.171.5.2.el9uek | [ELSA-2024-12887](https://patchblox.com/security/data/fix/linux/elsa-2024-12887.md) | Dec 18, 2024 | | Linux | kernel-uek ol 9 | 0:5.15.0-303.171.5.2.el9uek | [ELSA-2024-12887](https://patchblox.com/security/data/fix/linux/elsa-2024-12887.md) | Dec 18, 2024 | | Linux | kernel-uek-container ol 8 | 0:5.15.0-303.171.5.2.el9uek | [ELSA-2024-12887](https://patchblox.com/security/data/fix/linux/elsa-2024-12887.md) | Dec 18, 2024 | | Linux | kernel-uek-container ol 9 | 0:5.15.0-303.171.5.2.el9uek | [ELSA-2024-12887](https://patchblox.com/security/data/fix/linux/elsa-2024-12887.md) | Dec 18, 2024 | | Linux | kernel-uek-container-debug ol 8 | 0:5.15.0-303.171.5.2.el9uek | [ELSA-2024-12887](https://patchblox.com/security/data/fix/linux/elsa-2024-12887.md) | Dec 18, 2024 | | Linux | kernel-uek-container-debug ol 9 | 0:5.15.0-303.171.5.2.el9uek | [ELSA-2024-12887](https://patchblox.com/security/data/fix/linux/elsa-2024-12887.md) | Dec 18, 2024 | | Linux | kernel-uek-core ol 8 | 0:5.15.0-303.171.5.2.el9uek | [ELSA-2024-12887](https://patchblox.com/security/data/fix/linux/elsa-2024-12887.md) | Dec 18, 2024 | | Linux | kernel-uek-core ol 9 | 0:5.15.0-303.171.5.2.el9uek | [ELSA-2024-12887](https://patchblox.com/security/data/fix/linux/elsa-2024-12887.md) | Dec 18, 2024 | | Linux | kernel-uek-debug ol 8 | 0:5.15.0-303.171.5.2.el9uek | [ELSA-2024-12887](https://patchblox.com/security/data/fix/linux/elsa-2024-12887.md) | Dec 18, 2024 | | Linux | kernel-uek-debug ol 9 | 0:5.15.0-303.171.5.2.el9uek | [ELSA-2024-12887](https://patchblox.com/security/data/fix/linux/elsa-2024-12887.md) | Dec 18, 2024 | | Linux | kernel-uek-debug-core ol 8 | 0:5.15.0-303.171.5.2.el9uek | [ELSA-2024-12887](https://patchblox.com/security/data/fix/linux/elsa-2024-12887.md) | Dec 18, 2024 | | Linux | kernel-uek-debug-core ol 9 | 0:5.15.0-303.171.5.2.el9uek | [ELSA-2024-12887](https://patchblox.com/security/data/fix/linux/elsa-2024-12887.md) | Dec 18, 2024 | | Linux | kernel-uek-debug-devel ol 8 | 0:5.15.0-303.171.5.2.el9uek | [ELSA-2024-12887](https://patchblox.com/security/data/fix/linux/elsa-2024-12887.md) | Dec 18, 2024 | | Linux | kernel-uek-debug-devel ol 9 | 0:5.15.0-303.171.5.2.el9uek | [ELSA-2024-12887](https://patchblox.com/security/data/fix/linux/elsa-2024-12887.md) | Dec 18, 2024 | | Linux | kernel-uek-debug-modules ol 8 | 0:5.15.0-303.171.5.2.el9uek | [ELSA-2024-12887](https://patchblox.com/security/data/fix/linux/elsa-2024-12887.md) | Dec 18, 2024 | | Linux | kernel-uek-debug-modules ol 9 | 0:5.15.0-303.171.5.2.el9uek | [ELSA-2024-12887](https://patchblox.com/security/data/fix/linux/elsa-2024-12887.md) | Dec 18, 2024 | | Linux | kernel-uek-debug-modules-extra ol 8 | 0:5.15.0-303.171.5.2.el9uek | [ELSA-2024-12887](https://patchblox.com/security/data/fix/linux/elsa-2024-12887.md) | Dec 18, 2024 | | Linux | kernel-uek-debug-modules-extra ol 9 | 0:5.15.0-303.171.5.2.el9uek | [ELSA-2024-12887](https://patchblox.com/security/data/fix/linux/elsa-2024-12887.md) | Dec 18, 2024 | | Linux | kernel-uek-devel ol 8 | 0:5.15.0-303.171.5.2.el9uek | [ELSA-2024-12887](https://patchblox.com/security/data/fix/linux/elsa-2024-12887.md) | Dec 18, 2024 | | Linux | kernel-uek-devel ol 9 | 0:5.15.0-303.171.5.2.el9uek | [ELSA-2024-12887](https://patchblox.com/security/data/fix/linux/elsa-2024-12887.md) | Dec 18, 2024 | | Linux | kernel-uek-doc ol 8 | 0:5.15.0-303.171.5.2.el9uek | [ELSA-2024-12887](https://patchblox.com/security/data/fix/linux/elsa-2024-12887.md) | Dec 18, 2024 | | Linux | kernel-uek-doc ol 9 | 0:5.15.0-303.171.5.2.el9uek | [ELSA-2024-12887](https://patchblox.com/security/data/fix/linux/elsa-2024-12887.md) | Dec 18, 2024 | | Linux | kernel-uek-modules ol 8 | 0:5.15.0-303.171.5.2.el9uek | [ELSA-2024-12887](https://patchblox.com/security/data/fix/linux/elsa-2024-12887.md) | Dec 18, 2024 | | Linux | kernel-uek-modules ol 9 | 0:5.15.0-303.171.5.2.el9uek | [ELSA-2024-12887](https://patchblox.com/security/data/fix/linux/elsa-2024-12887.md) | Dec 18, 2024 | | Linux | kernel-uek-modules-extra ol 8 | 0:5.15.0-303.171.5.2.el9uek | [ELSA-2024-12887](https://patchblox.com/security/data/fix/linux/elsa-2024-12887.md) | Dec 18, 2024 | | Linux | kernel-uek-modules-extra ol 9 | 0:5.15.0-303.171.5.2.el9uek | [ELSA-2024-12887](https://patchblox.com/security/data/fix/linux/elsa-2024-12887.md) | Dec 18, 2024 | | Linux | linux Debian 12.15 (bookworm) | 6.1.119-1 | [DEBIAN-CVE-2024-50072](https://patchblox.com/security/data/fix/linux/debian-cve-2024-50072.md) | Oct 29, 2024 | | Linux | linux Debian 13.5 (trixie) | 6.11.5-1 | [DEBIAN-CVE-2024-50072](https://patchblox.com/security/data/fix/linux/debian-cve-2024-50072.md) | Oct 29, 2024 | | Linux | linux Debian 14 | 6.11.5-1 | [DEBIAN-CVE-2024-50072](https://patchblox.com/security/data/fix/linux/debian-cve-2024-50072.md) | Oct 29, 2024 | | Linux | perf amzn 2023 | 6.1.119-129.201.amzn2023 | [ALAS2023-2025-802](https://patchblox.com/security/data/fix/linux/alas2023-2025-802.md) | Jan 16, 2025 | | Linux | perf-debuginfo amzn 2023 | 6.1.119-129.201.amzn2023 | [ALAS2023-2025-802](https://patchblox.com/security/data/fix/linux/alas2023-2025-802.md) | Jan 16, 2025 | | Linux | python3-perf amzn 2023 | 6.1.119-129.201.amzn2023 | [ALAS2023-2025-802](https://patchblox.com/security/data/fix/linux/alas2023-2025-802.md) | Jan 16, 2025 | | Linux | python3-perf-debuginfo amzn 2023 | 6.1.119-129.201.amzn2023 | [ALAS2023-2025-802](https://patchblox.com/security/data/fix/linux/alas2023-2025-802.md) | Jan 16, 2025 | --- Data as of 2026-11-08T19:12:23Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.