PT-2024-7683 · Linux+2 · Linux Kernel+2

Gaurav Batra · Published 2024-02-19 · Updated 2024-11-01 · CVE-2024-26847

Positive Technologies (AI Summary)

CVSS v3.1

5.1

Medium

Base vector

AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.8.0-rc4

Description The vulnerability is caused by the incorrect spelling of a function name in the RTAS function table, leading to failed reverse lookups and warnings. The PAPR spec spells the function name as "ibm,reset-pe-dma-windows", but the firmware uses the singular form "ibm,reset-pe-dma-window". This mismatch causes issues when lockdep is enabled or the RTAS tracepoints are active, as these paths dereference the result of the lookup.

Recommendations To resolve the issue, use the correct spelling of the function name to match the firmware's behavior, adjusting the related constants to match. Specifically, update the RTAS function table to use the correct spelling "ibm,reset-pe-dma-window" instead of "ibm,reset-pe-dma-windows".

Note: The provided information does not specify the exact steps or patches required to fix the vulnerability for each affected version. However, based on the description, the resolution involves correcting the function name spelling in the RTAS function table.

Exploit

Fix

Improper Locking

Weakness Enumeration

CWE-667

Related Identifiers

BDU:2024-09129

CVE-2024-26847

Affected Products

Astra Linux

Linux Kernel

Red Os

References · 25

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/26xxx/CVE-2024-26847.json · Exploit
• https://osv.dev/vulnerability/CVE-2024-26847 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-26847 · Security Note
• https://git.kernel.org/stable/c/6b6282d56b14879124416a23837af9bd52ae2dfb · Patch
• https://osv.dev/vulnerability/DEBIAN-CVE-2024-26847 · Vendor Advisory
• https://git.kernel.org/stable/c/fad87dbd48156ab940538f052f1820f4b6ed2819 · Patch
• https://ubuntu.com/security/CVE-2024-26847 · Vendor Advisory
• https://git.kernel.org/stable/c/dd63817baf334888289877ab1db1d866af2a6479 · Patch
• https://osv.dev/vulnerability/UBUNTU-CVE-2024-26847 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2024-26847 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2024-26847 · Security Note
• https://osv.dev/vulnerability/BELL-CVE-2024-26847 · Vendor Advisory
• https://bdu.fstec.ru/vul/2024-09129 · Security Note
• https://redos.red-soft.ru/support/secure · Note
• https://lore.kernel.org/linux-cve-announce/2024041753-CVE-2024-26847-953f@gregkh/T/#u · Note