PT-2024-21448 · Linux+5 · Linux Kernel+5

Published 2024-04-02 · Updated 2026-03-13 · CVE-2024-26670

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The Linux kernel has a vulnerability related to the ARM64 WORKAROUND SPECULATIVE UNPRIV LOAD workaround. This workaround is used to handle Cortex-A520 erratum 2966298 and Cortex-A510 erratum 3117295. The issue arises because the TLBI+DSB is immediately followed by an LDR, instead of being placed after all explicit memory accesses. The patch fixes this by reworking the logic to place the TLBI+DSB immediately before the ERET, after all explicit memory accesses. The workaround is only applied when KPTI is not in use.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

DoS

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

ALSA-2025_12746

ALSA-2025_12752

ALSA-2025_12753

ALSA-2025_16880

CVE-2024-26670

ECHO-D6D6-ACCA-39D5

INFSA-2024_9315

OPENSUSE-SU-2024_1322-1

OPENSUSE-SU-2024_1322-2

OPENSUSE-SU-2024_1332-1

OPENSUSE-SU-2024_1332-2

OPENSUSE-SU-2024_1466-1

OPENSUSE-SU-2024_1480-1

OPENSUSE-SU-2024_1490-1

RHSA-2024:9315

RHSA-2024_9315

SUSE-SU-2024:1466-1

SUSE-SU-2024:1480-1

SUSE-SU-2024:1490-1

USN-6765-1

USN-6818-1

USN-6818-2

USN-6818-3

USN-6818-4

USN-6819-1

USN-6819-2

USN-6819-3

USN-6819-4

Affected Products

Debian

Linuxmint

Linux Kernel

Red Hat

Suse

Ubuntu

References · 634

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/26xxx/CVE-2024-26670.json · Exploit
• https://ubuntu.com/security/CVE-2024-24860 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-52593 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-26585 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-6818-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-52675 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-52697 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-52453 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-26633 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-52680 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-52458 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-52674 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-26671 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-52692 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-26644 · Vendor Advisory