- Vulnerability/
- CVE-2024-43868
CVE-2024-43868: riscv/purgatory: align riscv_kernel_entry
First published: Tue Aug 20 2024(Updated: )
In the Linux kernel, the following vulnerability has been resolved: riscv/purgatory: align riscv_kernel_entry When alignment handling is delegated to the kernel, everything must be word-aligned in purgatory, since the trap handler is then set to the kexec one. Without the alignment, hitting the exception would ultimately crash. On other occasions, the kernel's handler would take care of exceptions. This has been tested on a JH7110 SoC with oreboot and its SBI delegating unaligned access exceptions and the kernel configured to handle them.
Credit: 416baaa9-dc9f-4396-8d5f-8c081fb06d67 416baaa9-dc9f-4396-8d5f-8c081fb06d67
| Affected Software | Affected Version | How to fix |
|---|---|---|
| debian/linux | <=6.1.115-1 | 5.10.223-1 5.10.226-1 6.1.119-1 6.11.10-1 6.12.5-1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://git.kernel.org/stable/c/10ffafb456f293976c42f700578ef740467cb569
- https://git.kernel.org/stable/c/6e62dab357eea12db0fc62dea94c7a892888e6e8
- https://git.kernel.org/stable/c/5d4aaf16a8255f7c71790e211724ba029609c5ff
- https://git.kernel.org/stable/c/fb197c5d2fd24b9af3d4697d0cf778645846d6d5
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43868
- https://nvd.nist.gov/vuln/detail/CVE-2024-43868
- https://launchpad.net/bugs/cve/CVE-2024-43868
- https://security-tracker.debian.org/tracker/CVE-2024-43868
- https://ubuntu.com/security/CVE-2024-43868
- https://git.kernel.org/linus/fb197c5d2fd24b9af3d4697d0cf778645846d6d5
- agent/title
- agent/severity
- agent/type
- agent/first-publish-date
- collector/nvd-api
- source/NVD
- collector/nvd-cve
- agent/author
- agent/references
- collector/usn-cve
- source/Ubuntu
- agent/description
- collector/security-tracker-debian
- source/Debian
- agent/software-canonical-lookup
- agent/softwarecombine
- agent/tags
- agent/event
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/trending
- package-manager/debian