PT-2024-3344 · Linux+7 · Linux Kernel+7
Ricardo Neri
·
Published
2024-01-12
·
Updated
2025-10-22
·
CVE-2024-26646
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
The issue is related to the Intel Hardware Feedback Interface (HFI) in the Linux kernel. When resuming from hibernation, the restore kernel allocates a second memory buffer and reprograms the HFI hardware with the new location, which may differ from the one allocated by the image kernel. This can lead to memory corruption if the hardware writes to the invalid buffer. Additionally, the hardware may "forget" the address of the memory buffer when resuming from "deep" suspend, also potentially causing memory corruption.
Recommendations
To prevent the described memory corruption, disable HFI when preparing to suspend or hibernate. Enable it when resuming. Add syscore callbacks to handle the package of the boot CPU.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Allocation of Resources Without Limits
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Astra Linux
Debian
Linuxmint
Linux Kernel
Red Hat
Red Os
Suse
Ubuntu