PT-2024-32189 · Linux+6 · Linux Kernel+6
Breno Leitao
·
Published
2024-06-28
·
Updated
2026-05-26
·
CVE-2024-46774
CVSS v2.0
7.5
High
| Vector | AV:N/AC:L/Au:N/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
The issue is related to the prevention of Spectre v1 gadget construction in the sys rtas() function. The 'nargs' and 'nret' locals come directly from a user-supplied buffer and are used as indexes into a small stack-based array and as inputs to copy to user() after they are subject to bounds checks. To address this, array index nospec() is used after the bounds checks to clamp these values for speculative execution. The Smatch tool warns of a potential spectre issue with 'args.args'.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Memory Corruption
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Alt Linux
Astra Linux
Debian
Linuxmint
Linux Kernel
Suse
Ubuntu