CVEvulnerability

CVE-2024-40963

5.5 MEDIUM Published 2024-07-12 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2024-07-12
Last modified
2026-06-17
Assigner
416baaa9-dc9f-4396-8d5f-8c081fb06d67
CVSS 3.1 ([email protected])
5.5 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weaknesses
CWE-754

Description

In the Linux kernel, the following vulnerability has been resolved: mips: bmips: BCM6358: make sure CBR is correctly set It was discovered that some device have CBR address set to 0 causing kernel panic when arch_sync_dma_for_cpu_all is called. This was notice in situation where the system is booted from TP1 and BMIPS_GET_CBR() returns 0 instead of a valid address and !!(read_c0_brcm_cmt_local() & (1 << 31)); not failing. The current check whether RAC flush should be disabled or not are not enough hence lets check if CBR is a valid address or not.

Affected configurations

• linux linux kernel (>= 5.4.240 < 5.4.279) • linux linux kernel (>= 5.10.177 < 5.10.221) • linux linux kernel (>= 5.15.106 < 5.15.162) • linux linux kernel (>= 6.1.23 < 6.1.96) • linux linux kernel (>= 6.2.10 < 6.3) • linux linux kernel (>= 6.3.1 < 6.6.36) • linux linux kernel (>= 6.7 < 6.9.7) • linux linux kernel 6.3 • linux linux kernel 6.10

Related

Weakness · CWE (1)

  • CWE-754 Improper Check for Unusual or Exceptional Conditions weakness

References