CVE-2024-26705 - OpenCVE

In the Linux kernel, the following vulnerability has been resolved: parisc: BTLB: Fix crash when setting up BTLB at CPU bringup When using hotplug and bringing up a 32-bit CPU, ask the firmware about the BTLB information to set up the static (block) TLB entries. For that write access to the static btlb_info struct is needed, but since it is marked __ro_after_init the kernel segfaults with missing write permissions. Fix the crash by dropping the __ro_after_init annotation.

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required High

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact partial

No data.

No data.

No data.

References

Link	Providers
https://git.kernel.org/stable/c/54944f45470af5965fb9c28cf962ec30f38a8f5b
https://git.kernel.org/stable/c/913b9d443a0180cf0de3548f1ab3149378998486
https://git.kernel.org/stable/c/aa52be55276614d33f22fbe7da36c40d6432d10b
https://lore.kernel.org/linux-cve-announce/2024040340-CVE-2024-26705-c0ff@gregkh/T
https://nvd.nist.gov/vuln/detail/CVE-2024-26705
https://www.cve.org/CVERecord?id=CVE-2024-26705

History

No history.

MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2024-04-03T14:55:08.733Z

Updated: 2024-11-05T09:14:13.211Z

Reserved: 2024-02-19T14:20:24.158Z

Link: CVE-2024-26705

Vulnrichment

Updated: 2024-08-02T00:14:12.680Z

NVD

Status : Awaiting Analysis

Published: 2024-04-03T15:15:53.243

Modified: 2024-04-03T17:24:18.150

Link: CVE-2024-26705

Redhat

Severity : Low

Publid Date: 2024-04-03T00:00:00Z

Links: CVE-2024-26705 - Bugzilla

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2024-26705", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2024-02-19T14:20:24.158Z", "datePublished": "2024-04-03T14:55:08.733Z", "dateUpdated": "2024-11-05T09:14:13.211Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2024-11-05T09:14:13.211Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nparisc: BTLB: Fix crash when setting up BTLB at CPU bringup\n\nWhen using hotplug and bringing up a 32-bit CPU, ask the firmware about the\nBTLB information to set up the static (block) TLB entries.\n\nFor that write access to the static btlb_info struct is needed, but\nsince it is marked __ro_after_init the kernel segfaults with missing\nwrite permissions.\n\nFix the crash by dropping the __ro_after_init annotation."}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["arch/parisc/kernel/cache.c"], "versions": [{"version": "e5ef93d02d6c", "lessThan": "54944f45470a", "status": "affected", "versionType": "git"}, {"version": "e5ef93d02d6c", "lessThan": "aa52be552766", "status": "affected", "versionType": "git"}, {"version": "e5ef93d02d6c", "lessThan": "913b9d443a01", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["arch/parisc/kernel/cache.c"], "versions": [{"version": "6.6", "status": "affected"}, {"version": "0", "lessThan": "6.6", "status": "unaffected", "versionType": "semver"}, {"version": "6.6.18", "lessThanOrEqual": "6.6.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.7.6", "lessThanOrEqual": "6.7.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.8", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "references": [{"url": "https://git.kernel.org/stable/c/54944f45470af5965fb9c28cf962ec30f38a8f5b"}, {"url": "https://git.kernel.org/stable/c/aa52be55276614d33f22fbe7da36c40d6432d10b"}, {"url": "https://git.kernel.org/stable/c/913b9d443a0180cf0de3548f1ab3149378998486"}], "title": "parisc: BTLB: Fix crash when setting up BTLB at CPU bringup", "x_generator": {"engine": "bippy-9e1c9544281a"}}, "adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2024-26705", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-04-03T17:48:41.158959Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-06-04T17:48:58.261Z"}}, {"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T00:14:12.680Z"}, "title": "CVE Program Container", "references": [{"url": "https://git.kernel.org/stable/c/54944f45470af5965fb9c28cf962ec30f38a8f5b", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/aa52be55276614d33f22fbe7da36c40d6432d10b", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/913b9d443a0180cf0de3548f1ab3149378998486", "tags": ["x_transferred"]}]}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://git.kernel.org/stable/c/54944f45470af5965fb9c28cf962ec30f38a8f5b", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/aa52be55276614d33f22fbe7da36c40d6432d10b", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/913b9d443a0180cf0de3548f1ab3149378998486", "tags": ["x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T00:14:12.680Z"}}, {"metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2024-26705", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-04-03T17:48:41.158959Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-05-23T19:01:21.671Z"}, "title": "CISA ADP Vulnrichment"}], "cna": {"title": "parisc: BTLB: Fix crash when setting up BTLB at CPU bringup", "affected": [{"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "e5ef93d02d6c", "lessThan": "54944f45470a", "versionType": "git"}, {"status": "affected", "version": "e5ef93d02d6c", "lessThan": "aa52be552766", "versionType": "git"}, {"status": "affected", "version": "e5ef93d02d6c", "lessThan": "913b9d443a01", "versionType": "git"}], "programFiles": ["arch/parisc/kernel/cache.c"], "defaultStatus": "unaffected"}, {"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "6.6"}, {"status": "unaffected", "version": "0", "lessThan": "6.6", "versionType": "semver"}, {"status": "unaffected", "version": "6.6.18", "versionType": "semver", "lessThanOrEqual": "6.6.*"}, {"status": "unaffected", "version": "6.7.6", "versionType": "semver", "lessThanOrEqual": "6.7.*"}, {"status": "unaffected", "version": "6.8", "versionType": "original_commit_for_fix", "lessThanOrEqual": "*"}], "programFiles": ["arch/parisc/kernel/cache.c"], "defaultStatus": "affected"}], "references": [{"url": "https://git.kernel.org/stable/c/54944f45470af5965fb9c28cf962ec30f38a8f5b"}, {"url": "https://git.kernel.org/stable/c/aa52be55276614d33f22fbe7da36c40d6432d10b"}, {"url": "https://git.kernel.org/stable/c/913b9d443a0180cf0de3548f1ab3149378998486"}], "x_generator": {"engine": "bippy-9e1c9544281a"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nparisc: BTLB: Fix crash when setting up BTLB at CPU bringup\n\nWhen using hotplug and bringing up a 32-bit CPU, ask the firmware about the\nBTLB information to set up the static (block) TLB entries.\n\nFor that write access to the static btlb_info struct is needed, but\nsince it is marked __ro_after_init the kernel segfaults with missing\nwrite permissions.\n\nFix the crash by dropping the __ro_after_init annotation."}], "providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2024-11-05T09:14:13.211Z"}}}, "cveMetadata": {"cveId": "CVE-2024-26705", "state": "PUBLISHED", "dateUpdated": "2024-11-05T09:14:13.211Z", "dateReserved": "2024-02-19T14:20:24.158Z", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "datePublished": "2024-04-03T14:55:08.733Z", "assignerShortName": "Linux"}, "dataVersion": "5.1"}