{"id":"CVE-2024-53241","title":"x86/xen: don't do PV iret hypercall through hypercall page","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\nx86/xen: don't do PV iret hypercall through hypercall page\n\nInstead of jumping to the Xen hypercall page for doing the iret\nhypercall, directly code the required sequen…","severity":"none","vendor":"Linux","product":"Linux","affected":["Linux >= cdacc1278b12d929f9a053c245ff3d16eb7af9f8 < 05df6e6cd9a76b778aee33c3c18c9f3b3566d4a5","Linux >= cdacc1278b12d929f9a053c245ff3d16eb7af9f8 < c7b4cfa6213a44fa48714186dfdf125072d036e3","Linux >= cdacc1278b12d929f9a053c245ff3d16eb7af9f8 < fa719857f613fed94a79da055b13ca51214c694f","Linux >= cdacc1278b12d929f9a053c245ff3d16eb7af9f8 < 82c211ead1ec440dbf81727e17b03b5e3c44b93d","Linux >= cdacc1278b12d929f9a053c245ff3d16eb7af9f8 < f7c3fdad0a474062d566aae3289d490d7e702d30","Linux >= cdacc1278b12d929f9a053c245ff3d16eb7af9f8 < a2796dff62d6c6bfc5fbebdf2bee0d5ac0438906","Linux 2.6.27"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2026-11-05T20:28:31.253943Z"},"published":"2024-12-24","updated":"2026-11-05","sourceUpdated":"2026-11-05T20:31:23.423Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2024-53241","references":[{"url":"https://git.kernel.org/stable/c/05df6e6cd9a76b778aee33c3c18c9f3b3566d4a5"},{"url":"https://git.kernel.org/stable/c/c7b4cfa6213a44fa48714186dfdf125072d036e3"},{"url":"https://git.kernel.org/stable/c/fa719857f613fed94a79da055b13ca51214c694f"},{"url":"https://git.kernel.org/stable/c/82c211ead1ec440dbf81727e17b03b5e3c44b93d"},{"url":"https://git.kernel.org/stable/c/f7c3fdad0a474062d566aae3289d490d7e702d30"},{"url":"https://git.kernel.org/stable/c/a2796dff62d6c6bfc5fbebdf2bee0d5ac0438906"}],"tags":["cve.org"],"epss":0.0031,"epssPercentile":0.24071,"ingestedAt":"2026-11-05T22:38:31.831Z","slug":"CVE-2024-53241","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nx86/xen: don't do PV iret hypercall through hypercall page\n\nInstead of jumping to the Xen hypercall page for doing the iret\nhypercall, directly code the required sequence in xen-asm.S.\n\nThis is done in preparation of no longer using hypercall page at all,\nas it has shown to cause problems with speculation mitigations.\n\nThis is part of XSA-466 / CVE-2024-53241.\n\n## Affected\n\n- `Linux >= cdacc1278b12d929f9a053c245ff3d16eb7af9f8 < 05df6e6cd9a76b778aee33c3c18c9f3b3566d4a5`\n- `Linux >= cdacc1278b12d929f9a053c245ff3d16eb7af9f8 < c7b4cfa6213a44fa48714186dfdf125072d036e3`\n- `Linux >= cdacc1278b12d929f9a053c245ff3d16eb7af9f8 < fa719857f613fed94a79da055b13ca51214c694f`\n- `Linux >= cdacc1278b12d929f9a053c245ff3d16eb7af9f8 < 82c211ead1ec440dbf81727e17b03b5e3c44b93d`\n- `Linux >= cdacc1278b12d929f9a053c245ff3d16eb7af9f8 < f7c3fdad0a474062d566aae3289d490d7e702d30`\n- `Linux >= cdacc1278b12d929f9a053c245ff3d16eb7af9f8 < a2796dff62d6c6bfc5fbebdf2bee0d5ac0438906`\n- `Linux 2.6.27`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":3,"depthScoreParts":{"impact":2.8,"likelihood":0.1,"exploitation":0,"ransomware":0},"changes":[]}