CVE-2024-58084: firmware: qcom: scm: Fix missing read barrier in qcom_scm_get_tzmem_pool()
In the Linux kernel, the following vulnerability has been resolved:
firmware: qcom: scm: Fix missing read barrier in qcomscmgettzmempool()
Commit 2e4955167ec5 ("firmware: qcom: scm: Fix scm and waitq completion variable initialization") introduced a write barrier in probe function to store global 'scm' variable. We all known barriers are paired (see memory-barriers.txt: "Note that write barriers should normally be paired with read or address-dependency barriers"), therefore accessing it from concurrent contexts requires read barrier. Previous commit added such barrier in qcomscmisavailable(), so let's use that directly.
Lack of this read barrier can result in fetching stale 'scm' variable value, NULL, and dereferencing it.
Note that barrier in qcomscmisavailable() satisfies here the control dependency.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.12.15-1 - Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.1.176-1Fixed in 6.1.190-1Fixed in 6.12.107-1Fixed in 6.12.115-2Fixed in 7.2.12-1Fixed in 7.2.15-1 - Compensating control
Use the read barrier in qcom_scm_is_available() directly when accessing the global __scm variable from concurrent contexts, including qcom_scm_get_tzmem_pool().
Event History
Frequently Asked Questions
What is the severity of CVE-2024-58084?
CVE-2024-58084 has been classified as a vulnerability that could affect system stability and security in the Linux kernel.
How do I fix CVE-2024-58084?
To mitigate CVE-2024-58084, users should update their Linux kernel to the latest version that includes the patch addressing this vulnerability.
What systems are affected by CVE-2024-58084?
CVE-2024-58084 affects the Linux kernel, particularly those utilizing firmware components related to Qualcomm SCM.
Is CVE-2024-58084 a remote exploitation vulnerability?
CVE-2024-58084 is not categorized specifically as a remote exploitation vulnerability, but it may impact system operations.
What are the consequences of not addressing CVE-2024-58084?
Failing to address CVE-2024-58084 could lead to potential instabilities or security risks within systems running the affected Linux kernel.