CVE-2024-26761
published 2024-04-03CVE-2024-26761: In the Linux kernel, the following vulnerability has been resolved: cxl/pci: Fix disabling memory if DVSEC CXL Range does not match a CFMWS window The Linux…
PriorityP420medium5.5CVSS 3.1
AVLACLPRLUINSUCNINAH
EPSS
0.24%
14.6th percentile
In the Linux kernel, the following vulnerability has been resolved:
cxl/pci: Fix disabling memory if DVSEC CXL Range does not match a CFMWS window
The Linux CXL subsystem is built on the assumption that HPA == SPA.
That is, the host physical address (HPA) the HDM decoder registers are
programmed with are system physical addresses (SPA).
During HDM decoder setup, the DVSEC CXL range registers (cxl-3.1,
8.1.3.8) are checked if the memory is enabled and the CXL range is in
a HPA window that is described in a CFMWS structure of the CXL host
bridge (cxl-3.1, 9.18.1.3).
Now, if the HPA is not an SPA, the CXL range does not match a CFMWS
window and the CXL memory range will be disabled then. The HDM decoder
stops working which causes system memory being disabled and further a
system hang during HDM decoder initialization, typically when a CXL
enabled kernel boots.
Prevent a system hang and do not disable the HDM decoder if the
decoder's CXL range is not found in a CFMWS window.
Note the change only fixes a hardware hang, but does not implement
HPA/SPA translation. Support for this can be added in a follow on
patch series.
Affected
13 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 6.1.82-1 (bookworm) | linux 6.1.82-1 (bookworm) |
| linux | linux | — | — |
| linux | linux | >= 34e37b4c432cd0f1842b352fde4b8878b4166888 < 031217128990d7f0ab8c46db1afb3cf1e075fd29 | 031217128990d7f0ab8c46db1afb3cf1e075fd29 |
| linux | linux | >= 34e37b4c432cd0f1842b352fde4b8878b4166888 < 2cc1a530ab31c65b52daf3cb5d0883c8b614ea69 | 2cc1a530ab31c65b52daf3cb5d0883c8b614ea69 |
| linux | linux | >= 34e37b4c432cd0f1842b352fde4b8878b4166888 < 3a3181a71935774bda2398451256d7441426420b | 3a3181a71935774bda2398451256d7441426420b |
| linux | linux | >= 34e37b4c432cd0f1842b352fde4b8878b4166888 < 0cab687205986491302cd2e440ef1d253031c221 | 0cab687205986491302cd2e440ef1d253031c221 |
| linux | linux_kernel | — | — |
| linux | linux_kernel | >= 0 < 6.1.82-1 | 6.1.82-1 |
| linux | linux_kernel | >= 0 < 6.7.7-1 | 6.7.7-1 |
| linux | linux_kernel | >= 0 < 6.7.7-1 | 6.7.7-1 |
| linux | linux_kernel | >= 5.19 < 6.1.80 | 6.1.80 |
| linux | linux_kernel | >= 6.2 < 6.6.19 | 6.6.19 |
| linux | linux_kernel | >= 6.7 < 6.7.7 | 6.7.7 |
CVSS provenance
nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
osv5.5MEDIUM
vendor_debian5.5MEDIUM
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
kernel: cxl/pci: Fix disabling memory if DVSEC CXL Range does not match a CFMWS window
vendor_redhat·2024-04-03·CVSS 5.5
CVE-2024-26761 [MEDIUM] CWE-20 kernel: cxl/pci: Fix disabling memory if DVSEC CXL Range does not match a CFMWS window
kernel: cxl/pci: Fix disabling memory if DVSEC CXL Range does not match a CFMWS window
In the Linux kernel, the following vulnerability has been resolved:
cxl/pci: Fix disabling memory if DVSEC CXL Range does not match a CFMWS window
The Linux CXL subsystem is built on the assumption that HPA == SPA.
That is, the host physical address (HPA) the HDM decoder registers are
programmed with are system physical addresses (SPA).
During HDM decoder setup, the DVSEC CXL range registers (cxl-3.1,
8.1.3.8) are checked if the memory is enabled and the CXL range is in
a HPA window that is described in a CFMWS structure of the CXL host
bridge (cxl-3.1, 9.18.1.3).
Now, if the HPA is not an SPA, the CXL range does not match a CFMWS
window and the CXL memory range will be disabled then. The HDM decoder
st
Debian
CVE-2024-26761: linux - In the Linux kernel, the following vulnerability has been resolved: cxl/pci: Fi...
vendor_debian·2024·CVSS 5.5
CVE-2024-26761 [MEDIUM] CVE-2024-26761: linux - In the Linux kernel, the following vulnerability has been resolved: cxl/pci: Fi...
In the Linux kernel, the following vulnerability has been resolved: cxl/pci: Fix disabling memory if DVSEC CXL Range does not match a CFMWS window The Linux CXL subsystem is built on the assumption that HPA == SPA. That is, the host physical address (HPA) the HDM decoder registers are programmed with are system physical addresses (SPA). During HDM decoder setup, the DVSEC CXL range registers (cxl-3.1, 8.1.3.8) are checked if the memory is enabled and the CXL range is in a HPA window that is described in a CFMWS structure of the CXL host bridge (cxl-3.1, 9.18.1.3). Now, if the HPA is not an SPA, the CXL range does not match a CFMWS window and the CXL memory range will be disabled then. The HDM decoder stops working which causes system memory being disabled and further a system hang during H
OSV
CVE-2024-26761: In the Linux kernel, the following vulnerability has been resolved: cxl/pci: Fix disabling memory if DVSEC CXL Range does not match a CFMWS window The
osv·2024-04-03·CVSS 5.5
CVE-2024-26761 [MEDIUM] CVE-2024-26761: In the Linux kernel, the following vulnerability has been resolved: cxl/pci: Fix disabling memory if DVSEC CXL Range does not match a CFMWS window The
In the Linux kernel, the following vulnerability has been resolved: cxl/pci: Fix disabling memory if DVSEC CXL Range does not match a CFMWS window The Linux CXL subsystem is built on the assumption that HPA == SPA. That is, the host physical address (HPA) the HDM decoder registers are programmed with are system physical addresses (SPA). During HDM decoder setup, the DVSEC CXL range registers (cxl-3.1, 8.1.3.8) are checked if the memory is enabled and the CXL range is in a HPA window that is described in a CFMWS structure of the CXL host bridge (cxl-3.1, 9.18.1.3). Now, if the HPA is not an SPA, the CXL range does not match a CFMWS window and the CXL memory range will be disabled then. The HDM decoder stops working which causes system memory being disabled and further a system hang during H
GHSA
GHSA-wxj8-5gp5-wmxf: In the Linux kernel, the following vulnerability has been resolved:
cxl/pci: Fix disabling memory if DVSEC CXL Range does not match a CFMWS window
T
ghsa_unreviewed·2024-04-03
CVE-2024-26761 [MEDIUM] GHSA-wxj8-5gp5-wmxf: In the Linux kernel, the following vulnerability has been resolved:
cxl/pci: Fix disabling memory if DVSEC CXL Range does not match a CFMWS window
T
In the Linux kernel, the following vulnerability has been resolved:
cxl/pci: Fix disabling memory if DVSEC CXL Range does not match a CFMWS window
The Linux CXL subsystem is built on the assumption that HPA == SPA.
That is, the host physical address (HPA) the HDM decoder registers are
programmed with are system physical addresses (SPA).
During HDM decoder setup, the DVSEC CXL range registers (cxl-3.1,
8.1.3.8) are checked if the memory is enabled and the CXL range is in
a HPA window that is described in a CFMWS structure of the CXL host
bridge (cxl-3.1, 9.18.1.3).
Now, if the HPA is not an SPA, the CXL range does not match a CFMWS
window and the CXL memory range will be disabled then. The HDM decoder
stops working which causes system memory being disabled and further a
system hang duri
No detection rules found.
No public exploits indexed.
https://git.kernel.org/stable/c/031217128990d7f0ab8c46db1afb3cf1e075fd29https://git.kernel.org/stable/c/0cab687205986491302cd2e440ef1d253031c221https://git.kernel.org/stable/c/2cc1a530ab31c65b52daf3cb5d0883c8b614ea69https://git.kernel.org/stable/c/3a3181a71935774bda2398451256d7441426420bhttps://git.kernel.org/stable/c/031217128990d7f0ab8c46db1afb3cf1e075fd29https://git.kernel.org/stable/c/0cab687205986491302cd2e440ef1d253031c221https://git.kernel.org/stable/c/2cc1a530ab31c65b52daf3cb5d0883c8b614ea69https://git.kernel.org/stable/c/3a3181a71935774bda2398451256d7441426420b
2024-04-03
Published