CVE-2024-42230

July 30, 2024, 7:32 p.m.

Analyzed
CVE has been recently published to the CVE List and has been received by the NVD.

Products

Linux kernel

linux_kernel

  • *

linux_kernel

  • 6
  • .
  • 1
  • 0

Source

416baaa9-dc9f-4396-8d5f-8c081fb06d67

Tags

CVE-2024-42230 details

Published : July 30, 2024, 8:15 a.m.
Last Modified : July 30, 2024, 7:32 p.m.

Description

In the Linux kernel, the following vulnerability has been resolved: powerpc/pseries: Fix scv instruction crash with kexec kexec on pseries disables AIL (reloc_on_exc), required for scv instruction support, before other CPUs have been shut down. This means they can execute scv instructions after AIL is disabled, which causes an interrupt at an unexpected entry location that crashes the kernel. Change the kexec sequence to disable AIL after other CPUs have been brought down. As a refresher, the real-mode scv interrupt vector is 0x17000, and the fixed-location head code probably couldn't easily deal with implementing such high addresses so it was just decided not to support that interrupt at all.

CVSS Score

1 2 3 4.4 5 6 7 8 9 10

Weakness

Weakness Name Description

CVSS Data

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

Base Score

4.4

Exploitability Score

0.8

Impact Score

3.6

Base Severity

MEDIUM

CPEs

Type Vendor Product Version Update Edition Language Software Edition Target Software Target Hardware Other Information
o linux linux_kernel / / / / / / / /
o linux linux_kernel / / / / / / / /
o linux linux_kernel / / / / / / / /
o linux linux_kernel 6.10 rc1 / / / / / /
o linux linux_kernel 6.10 rc2 / / / / / /
o linux linux_kernel 6.10 rc3 / / / / / /
o linux linux_kernel 6.10 rc4 / / / / / /
o linux linux_kernel 6.10 rc5 / / / / / /
o linux linux_kernel 6.10 rc6 / / / / / /
This website uses the NVD API, but is not approved or certified by it.