CVE-2024-11263

published 2024-11-15

CVE-2024-11263: When the Global Pointer (GP) relative addressing is enabled (CONFIG_RISCV_GP=y), the gp reg points at 0x800 bytes past the start of the .sdata section which is…

Priority P3 38 high 8.4 CVSS 3.1

AV L AC L PR N UI N S U C H I H A H

When the Global Pointer (GP) relative addressing is enabled (CONFIG_RISCV_GP=y), the gp reg points at 0x800 bytes past the start of the .sdata section which is then used by the linker to relax accesses to global symbols.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
zephyrproject-rtos	zephyr	* – 3.7	—
zephyrproject	zephyr	<= 3.7.0	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-270