Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Easwar Hariharan

Researcher fromMicrosoft
#46560of 53,779
5.5Total CVSS
Vulnerabilities · 1
PT-2024-26832
5.5
2024-03-01
Linux · Linux Kernel · CVE-2024-35995
**Name of the Vulnerable Software and Affected Versions** Linux kernel versions prior to 6.6.37 **Description** The issue is related to the ACPI CPPC (Collaborative Processor Performance Control) in the Linux kernel, where using `bit width` for system memory accesses could lead to issues since it can be any 8-bit value and may not always be on a clean 8b boundary. This was discovered on the Cobalt 100 platform. The problem causes a kernel panic due to an asynchronous SError interrupt. To fix this, the kernel now uses `access width` to determine the size and shifts and masks the bits accordingly for read/write operations, with a fallback to `bit width` if `access width` is not set. **Recommendations** For Linux kernel versions prior to 6.6.37, update to version 6.6.37 or later to resolve the issue.