PT-2024-26832 · Linux+5 · Linux Kernel+5
Easwar Hariharan
·
Published
2024-03-01
·
Updated
2026-05-26
·
CVE-2024-35995
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 6.6.37
Description
The issue is related to the ACPI CPPC (Collaborative Processor Performance Control) in the Linux kernel, where using
bit width for system memory accesses could lead to issues since it can be any 8-bit value and may not always be on a clean 8b boundary. This was discovered on the Cobalt 100 platform. The problem causes a kernel panic due to an asynchronous SError interrupt. To fix this, the kernel now uses access width to determine the size and shifts and masks the bits accordingly for read/write operations, with a fallback to bit width if access width is not set.Recommendations
For Linux kernel versions prior to 6.6.37, update to version 6.6.37 or later to resolve the issue.
Exploit
Fix
Buffer Overflow
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Astra Linux
Debian
Linux Kernel
Red Hat
Red Os
Suse