CVE-2024-46774: powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
In the Linux kernel, the following vulnerability has been resolved:
powerpc/rtas: Prevent Spectre v1 gadget construction in sysrtas()
Smatch warns:
arch/powerpc/kernel/rtas.c:1932 dosysrtas() warn: potential spectre issue 'args.args' [r] (local cap)
The 'nargs' and 'nret' locals come directly from a user-supplied buffer and are used as indexes into a small stack-based array and as inputs to copytouser() after they are subject to bounds checks.
Use arrayindexnospec() after the bounds checks to clamp these values for speculative execution.
Other sources
This CVE was automatically created from a reference found in an email or other text. If you are reading this, then this CVE entry is probably erroneous, since this text should be replaced by the official CVE description automatically.
— Launchpad
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-46774?
CVE-2024-46774 is classified as a medium severity vulnerability in the Linux kernel.
How do I fix CVE-2024-46774?
To mitigate CVE-2024-46774, upgrade to Linux kernel versions 6.12.11-1 or 6.12.12-1 or apply the relevant patches.
What systems are affected by CVE-2024-46774?
CVE-2024-46774 affects multiple versions of the Linux kernel, specifically those prior to version 6.10.10.
What can happen if CVE-2024-46774 is exploited?
Exploitation of CVE-2024-46774 could allow an attacker to potentially construct a Spectre v1 gadget, leading to information disclosure.
Is there a workaround for CVE-2024-46774?
Currently, the recommended approach is to update the kernel as no specific workarounds are provided for CVE-2024-46774.