PT-2024-21479 · Linux+1 · Linux Kernel+1

Helge Deller · Published 2024-04-03 · Updated 2024-10-16 · CVE-2024-26705

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue occurs when using hotplug and bringing up a 32-bit CPU. The kernel asks the firmware about the BTLB information to set up the static (block) TLB entries, requiring write access to the static btlb info struct. However, since it is marked ro after init, the kernel segfaults with missing write permissions. The fix involves dropping the ro after init annotation.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Missing Authorization

Weakness Enumeration

CWE-862

Related Identifiers

CVE-2024-26705

Affected Products

Linux Kernel

Red Os

References · 16

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/26xxx/CVE-2024-26705.json · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2024-26705 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2024-26705 · Vendor Advisory
• https://git.kernel.org/stable/c/913b9d443a0180cf0de3548f1ab3149378998486 · Patch
• https://osv.dev/vulnerability/CVE-2024-26705 · Vendor Advisory
• https://osv.dev/vulnerability/BELL-CVE-2024-26705 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-26705 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2024-26705 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2024-26705 · Vendor Advisory
• https://git.kernel.org/stable/c/54944f45470af5965fb9c28cf962ec30f38a8f5b · Patch
• https://git.kernel.org/stable/c/aa52be55276614d33f22fbe7da36c40d6432d10b · Patch
• https://cve.org/CVERecord?id=CVE-2024-26705 · Security Note
• https://git.kernel.org/linus/913b9d443a0180cf0de3548f1ab3149378998486 · Note
• https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git · Note
• https://redos.red-soft.ru/support/secure/uyazvimosti/support/secure/uyazvimosti/mnozhestvennye-uyazvimosti-kernel-lt-16-10-24-1 · Note