Lucene search

K
cvelistLinuxCVELIST:CVE-2024-38614
HistoryJun 19, 2024 - 1:56 p.m.

CVE-2024-38614 openrisc: traps: Don't send signals to kernel mode threads

2024-06-1913:56:14
Linux
www.cve.org
3
openrisc
exception handling
signals
kernel mode
patches
cve

0.0004 Low

EPSS

Percentile

15.7%

In the Linux kernel, the following vulnerability has been resolved:

openrisc: traps: Don’t send signals to kernel mode threads

OpenRISC exception handling sends signals to user processes on floating
point exceptions and trap instructions (for debugging) among others.
There is a bug where the trap handling logic may send signals to kernel
threads, we should not send these signals to kernel threads, if that
happens we treat it as an error.

This patch adds conditions to die if the kernel receives these
exceptions in kernel mode code.

CNA Affected

[
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "unaffected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "arch/openrisc/kernel/traps.c"
    ],
    "versions": [
      {
        "version": "27267655c531",
        "lessThan": "c0ed9a711e33",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "27267655c531",
        "lessThan": "075c0405b0d7",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "27267655c531",
        "lessThan": "cea9d0015c14",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "27267655c531",
        "lessThan": "c88cfb5cea5f",
        "status": "affected",
        "versionType": "git"
      }
    ]
  },
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "affected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "arch/openrisc/kernel/traps.c"
    ],
    "versions": [
      {
        "version": "6.4",
        "status": "affected"
      },
      {
        "version": "0",
        "lessThan": "6.4",
        "status": "unaffected",
        "versionType": "custom"
      },
      {
        "version": "6.6.33",
        "lessThanOrEqual": "6.6.*",
        "status": "unaffected",
        "versionType": "custom"
      },
      {
        "version": "6.8.12",
        "lessThanOrEqual": "6.8.*",
        "status": "unaffected",
        "versionType": "custom"
      },
      {
        "version": "6.9.3",
        "lessThanOrEqual": "6.9.*",
        "status": "unaffected",
        "versionType": "custom"
      },
      {
        "version": "6.10-rc1",
        "lessThanOrEqual": "*",
        "status": "unaffected",
        "versionType": "original_commit_for_fix"
      }
    ]
  }
]

0.0004 Low

EPSS

Percentile

15.7%

Related for CVELIST:CVE-2024-38614