CVE-2024-43868: riscv/purgatory: align riscv_kernel_entry
In the Linux kernel, the following vulnerability has been resolved:
riscv/purgatory: align riscvkernelentry
When alignment handling is delegated to the kernel, everything must be word-aligned in purgatory, since the trap handler is then set to the kexec one. Without the alignment, hitting the exception would ultimately crash. On other occasions, the kernel's handler would take care of exceptions. This has been tested on a JH7110 SoC with oreboot and its SBI delegating unaligned access exceptions and the kernel configured to handle them.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.223-1Fixed in 5.10.234-1Fixed in 6.1.129-1Fixed in 6.1.135-1Fixed in 6.12.25-1 - Upgrade
Upgrade
debian/linux-6.1to a version that resolves this vulnerability.Fixed in 6.1.129-1~deb11u1
Event History
Frequently Asked Questions
What is the severity of CVE-2024-43868?
CVE-2024-43868 has been classified as a medium severity vulnerability in the Linux kernel.
What software is affected by CVE-2024-43868?
CVE-2024-43868 affects specific versions of the Linux package including 5.10.223-1, 5.10.226-1, 6.1.119-1, and several others.
How do I fix CVE-2024-43868?
To fix CVE-2024-43868, update to the patched versions of Linux which are 5.10.226-1, 6.1.123-1, and others as specified in the advisory.
Is my system vulnerable to CVE-2024-43868?
Check if your system is running any of the affected Linux kernel versions listed in the vulnerability advisory.
What does CVE-2024-43868 impact in the Linux kernel?
CVE-2024-43868 impacts alignment handling in the purgatory section of the riscv architecture in the Linux kernel.