CVE-2024-11263

When the Global Pointer (GP) relative addressing is enabled (CONFIG_RISCV_GP=y), the gp reg points at 0x800 bytes past the start of the .sdata section which is then used by the linker to relax accesses to global symbols.

CVSS v3 9.3 CRITICAL

9.3^/10

CVSS v3 : CRITICAL

Vector :

Exploitability : 2.5 / Impact : 6.0

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope CHANGED

References

Link	Resource
https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-jjf3-7x72-pqm9	Patch Vendor Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:o:zephyrproject:zephyr:*:*:*:*:*:*:*:*

History

03 Feb 2025, 20:09

Type	Values Removed	Values Added
References	~~() https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-jjf3-7x72-pqm9 -~~	() https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-jjf3-7x72-pqm9 - Patch, Vendor Advisory
CPE		cpe:2.3:o:zephyrproject:zephyr::::::::
First Time		Zephyrproject zephyr Zephyrproject
CWE		NVD-CWE-noinfo

18 Nov 2024, 17:11

Type	Values Removed	Values Added
Summary		(es) Cuando la dirección relativa del puntero global (GP) está habilitada (CONFIG_RISCV_GP=y), el registro gp apunta a 0x800 bytes más allá del inicio de la sección .sdata, que luego es utilizada por el enlazador para relajar los accesos a los símbolos globales.

15 Nov 2024, 23:15

Type	Values Removed	Values Added
New CVE

Information

Published : 2024-11-15 23:15

Updated : 2025-02-03 20:09

NVD link : CVE-2024-11263

Mitre link : CVE-2024-11263

CVE.ORG link : CVE-2024-11263

JSON object : View

Products Affected

zephyrproject

zephyr

CWE

CWE-270

Privilege Context Switching Error

NVD-CWE-noinfo

{"id": "CVE-2024-11263", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "vulnerabilities@zephyrproject.org", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 9.3, "attackVector": "LOCAL", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 6.0, "exploitabilityScore": 2.5}, {"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.4, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 2.5}]}, "published": "2024-11-15T23:15:10.557", "references": [{"url": "https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-jjf3-7x72-pqm9", "tags": ["Patch", "Vendor Advisory"], "source": "vulnerabilities@zephyrproject.org"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "vulnerabilities@zephyrproject.org", "description": [{"lang": "en", "value": "CWE-270"}]}, {"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-noinfo"}]}], "descriptions": [{"lang": "en", "value": "When the Global Pointer (GP) relative addressing is enabled (CONFIG_RISCV_GP=y), the gp reg points at 0x800 bytes past the start of the .sdata section which is then used by the linker to relax accesses to global symbols."}, {"lang": "es", "value": "Cuando la direcci\u00f3n relativa del puntero global (GP) est\u00e1 habilitada (CONFIG_RISCV_GP=y), el registro gp apunta a 0x800 bytes m\u00e1s all\u00e1 del inicio de la secci\u00f3n .sdata, que luego es utilizada por el enlazador para relajar los accesos a los s\u00edmbolos globales."}], "lastModified": "2025-02-03T20:09:54.800", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:zephyrproject:zephyr:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "298E55B2-C792-4444-9663-C28901674D88", "versionEndIncluding": "3.7.0"}], "operator": "OR"}]}], "sourceIdentifier": "vulnerabilities@zephyrproject.org"}