CVE-2024-26705
published 2024-04-03CVE-2024-26705: In the Linux kernel, the following vulnerability has been resolved: parisc: BTLB: Fix crash when setting up BTLB at CPU bringup When using hotplug and bringing…
PriorityP420medium5.5CVSS 3.1
AVLACLPRLUINSUCNINAH
EPSS
0.19%
9.3th percentile
In the Linux kernel, the following vulnerability has been resolved:
parisc: BTLB: Fix crash when setting up BTLB at CPU bringup
When using hotplug and bringing up a 32-bit CPU, ask the firmware about the
BTLB information to set up the static (block) TLB entries.
For that write access to the static btlb_info struct is needed, but
since it is marked __ro_after_init the kernel segfaults with missing
write permissions.
Fix the crash by dropping the __ro_after_init annotation.
Affected
10 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 6.7.7-1 (forky) | linux 6.7.7-1 (forky) |
| linux | linux | — | — |
| linux | linux | >= e5ef93d02d6c9cc3a14e7348481c9e41a528caa1 < 54944f45470af5965fb9c28cf962ec30f38a8f5b | 54944f45470af5965fb9c28cf962ec30f38a8f5b |
| linux | linux | >= e5ef93d02d6c9cc3a14e7348481c9e41a528caa1 < aa52be55276614d33f22fbe7da36c40d6432d10b | aa52be55276614d33f22fbe7da36c40d6432d10b |
| linux | linux | >= e5ef93d02d6c9cc3a14e7348481c9e41a528caa1 < 913b9d443a0180cf0de3548f1ab3149378998486 | 913b9d443a0180cf0de3548f1ab3149378998486 |
| linux | linux_kernel | — | — |
| linux | linux_kernel | >= 0 < 6.7.7-1 | 6.7.7-1 |
| linux | linux_kernel | >= 0 < 6.7.7-1 | 6.7.7-1 |
| linux | linux_kernel | >= 6.6 < 6.6.18 | 6.6.18 |
| linux | linux_kernel | >= 6.7 < 6.7.6 | 6.7.6 |
CVSS provenance
nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
osv5.5MEDIUM
vendor_debian5.5LOW
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-xv6f-4q9w-8q96: In the Linux kernel, the following vulnerability has been resolved:
parisc: BTLB: Fix crash when setting up BTLB at CPU bringup
When using hotplug a
ghsa_unreviewed·2024-04-03
CVE-2024-26705 [MEDIUM] CWE-862 GHSA-xv6f-4q9w-8q96: In the Linux kernel, the following vulnerability has been resolved:
parisc: BTLB: Fix crash when setting up BTLB at CPU bringup
When using hotplug a
In the Linux kernel, the following vulnerability has been resolved:
parisc: BTLB: Fix crash when setting up BTLB at CPU bringup
When using hotplug and bringing up a 32-bit CPU, ask the firmware about the
BTLB information to set up the static (block) TLB entries.
For that write access to the static btlb_info struct is needed, but
since it is marked __ro_after_init the kernel segfaults with missing
write permissions.
Fix the crash by dropping the __ro_after_init annotation.
OSV
CVE-2024-26705: In the Linux kernel, the following vulnerability has been resolved: parisc: BTLB: Fix crash when setting up BTLB at CPU bringup When using hotplug and
osv·2024-04-03·CVSS 5.5
CVE-2024-26705 [MEDIUM] CVE-2024-26705: In the Linux kernel, the following vulnerability has been resolved: parisc: BTLB: Fix crash when setting up BTLB at CPU bringup When using hotplug and
In the Linux kernel, the following vulnerability has been resolved: parisc: BTLB: Fix crash when setting up BTLB at CPU bringup When using hotplug and bringing up a 32-bit CPU, ask the firmware about the BTLB information to set up the static (block) TLB entries. For that write access to the static btlb_info struct is needed, but since it is marked __ro_after_init the kernel segfaults with missing write permissions. Fix the crash by dropping the __ro_after_init annotation.
Red Hat
kernel: parisc: BTLB: Fix crash when setting up BTLB at CPU bringup
vendor_redhat·2024-04-03·CVSS 5.5
CVE-2024-26705 [MEDIUM] CWE-99 kernel: parisc: BTLB: Fix crash when setting up BTLB at CPU bringup
kernel: parisc: BTLB: Fix crash when setting up BTLB at CPU bringup
In the Linux kernel, the following vulnerability has been resolved:
parisc: BTLB: Fix crash when setting up BTLB at CPU bringup
When using hotplug and bringing up a 32-bit CPU, ask the firmware about the
BTLB information to set up the static (block) TLB entries.
For that write access to the static btlb_info struct is needed, but
since it is marked __ro_after_init the kernel segfaults with missing
write permissions.
Fix the crash by dropping the __ro_after_init annotation.
Package: kernel (Red Hat Enterprise Linux 6) - Not affected
Package: kernel (Red Hat Enterprise Linux 7) - Not affected
Package: kernel-rt (Red Hat Enterprise Linux 7) - Not affected
Package: kernel (Red Hat Enterprise Linux 8) - Not affected
Packag
Debian
CVE-2024-26705: linux - In the Linux kernel, the following vulnerability has been resolved: parisc: BTL...
vendor_debian·2024·CVSS 5.5
CVE-2024-26705 [MEDIUM] CVE-2024-26705: linux - In the Linux kernel, the following vulnerability has been resolved: parisc: BTL...
In the Linux kernel, the following vulnerability has been resolved: parisc: BTLB: Fix crash when setting up BTLB at CPU bringup When using hotplug and bringing up a 32-bit CPU, ask the firmware about the BTLB information to set up the static (block) TLB entries. For that write access to the static btlb_info struct is needed, but since it is marked __ro_after_init the kernel segfaults with missing write permissions. Fix the crash by dropping the __ro_after_init annotation.
Scope: local
bookworm: resolved
bullseye: resolved
forky: resolved (fixed in 6.7.7-1)
sid: resolved (fixed in 6.7.7-1)
trixie: resolved (fixed in 6.7.7-1)
No detection rules found.
No public exploits indexed.
https://git.kernel.org/stable/c/54944f45470af5965fb9c28cf962ec30f38a8f5bhttps://git.kernel.org/stable/c/913b9d443a0180cf0de3548f1ab3149378998486https://git.kernel.org/stable/c/aa52be55276614d33f22fbe7da36c40d6432d10bhttps://git.kernel.org/stable/c/54944f45470af5965fb9c28cf962ec30f38a8f5bhttps://git.kernel.org/stable/c/913b9d443a0180cf0de3548f1ab3149378998486https://git.kernel.org/stable/c/aa52be55276614d33f22fbe7da36c40d6432d10b
2024-04-03
Published