CVE-2024-11149: OpenBSD

Medium severity, CVSS 5.5. EPSS: 0.1% chance of exploitation in the next 30 days.

In OpenBSD 7.4 before errata 014, vmm(4) did not restore GDTR limits properly on Intel (VMX) CPUs.

Affected products

• OpenBSD OpenBSD: before 7.4 (fixed in 7.4); version 7.4 only

Published 2024-12-06. Last modified 2026-06-17.