CVE-2024-42230: powerpc/pseries: Fix scv instruction crash with kexec
In the Linux kernel, the following vulnerability has been resolved:
powerpc/pseries: Fix scv instruction crash with kexec
kexec on pseries disables AIL (reloconexc), required for scv instruction support, before other CPUs have been shut down. This means they can execute scv instructions after AIL is disabled, which causes an interrupt at an unexpected entry location that crashes the kernel.
Change the kexec sequence to disable AIL after other CPUs have been brought down.
As a refresher, the real-mode scv interrupt vector is 0x17000, and the fixed-location head code probably couldn't easily deal with implementing such high addresses so it was just decided not to support that interrupt at all.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-42230?
CVE-2024-42230 is classified as a moderate severity vulnerability in the Linux kernel.
How do I fix CVE-2024-42230?
To fix CVE-2024-42230, update to the appropriate version of the Linux kernel, such as 6.1.123-1 or later.
Which versions of the Linux kernel are affected by CVE-2024-42230?
CVE-2024-42230 affects various versions of the Linux kernel from 5.9 up to 6.6.39 and certain release candidates of 6.10.
What issue does CVE-2024-42230 address in the Linux kernel?
CVE-2024-42230 addresses a crash issue related to the scv instruction when kexec is used on pseries.
Is CVE-2024-42230 a remote or local vulnerability?
CVE-2024-42230 is considered a local privilege escalation vulnerability, requiring local access to exploit.