CVE-2024-40984

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-40984
In the Linux kernel, the following vulnerability has been resolved: ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine." Undo the modifications made in commit d410ee5109a1 ("ACPICA: avoid "Info: mapping multiple BARs. Your kernel is fine.""). The initial purpose of this commit was to stop memory mappings for operation regions from overlapping page boundaries, as it can trigger warnings if different page attributes are present. However, it was found that when this situation arises, mapping continues until the boundary's end, but there is still an attempt to read/write the entire length of the map, leading to a NULL pointer deference. For example, if a four-byte mapping request is made but only one byte is mapped because it hits the current page boundary's end, a four-byte read/write attempt is still made, resulting in a NULL pointer deference. Instead, map the entire length, as the ACPI specification does not mandate that it must be within the same page boundary. It is permissible for it to be mapped across different regions.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/434c6b924e1f4c219aab2d9e05fe79c5364e37d3 Patch
https://git.kernel.org/stable/c/435ecc978c3d5d0c4e172ec5b956dc1904061d98 Patch
https://git.kernel.org/stable/c/6eca23100e9030725f69c1babacd58803f29ec8d Patch
https://git.kernel.org/stable/c/a83e1385b780d41307433ddbc86e3c528db031f0 Patch
https://git.kernel.org/stable/c/ae465109d82f4fb03c5adbe85f2d6a6a3d59124c Patch
https://git.kernel.org/stable/c/dc5017c57f5eee80020c73ff8b67ba7f9fd08b1f Patch
https://git.kernel.org/stable/c/ddc1f5f124479360a1fd43f73be950781d172239 Patch
https://git.kernel.org/stable/c/e21a4c9129c72fa54dd00f5ebf71219b41d43c04 Patch
https://git.kernel.org/stable/c/434c6b924e1f4c219aab2d9e05fe79c5364e37d3 Patch
https://git.kernel.org/stable/c/435ecc978c3d5d0c4e172ec5b956dc1904061d98 Patch
https://git.kernel.org/stable/c/6eca23100e9030725f69c1babacd58803f29ec8d Patch
https://git.kernel.org/stable/c/a83e1385b780d41307433ddbc86e3c528db031f0 Patch
https://git.kernel.org/stable/c/ae465109d82f4fb03c5adbe85f2d6a6a3d59124c Patch
https://git.kernel.org/stable/c/dc5017c57f5eee80020c73ff8b67ba7f9fd08b1f Patch
https://git.kernel.org/stable/c/ddc1f5f124479360a1fd43f73be950781d172239 Patch
https://git.kernel.org/stable/c/e21a4c9129c72fa54dd00f5ebf71219b41d43c04 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.10:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.10:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.10:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.10:rc4:*:*:*:*:*:*
History

06 Mar 2025, 12:53

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/434c6b924e1f4c219aab2d9e05fe79c5364e37d3 - () https://git.kernel.org/stable/c/434c6b924e1f4c219aab2d9e05fe79c5364e37d3 - Patch
References () https://git.kernel.org/stable/c/435ecc978c3d5d0c4e172ec5b956dc1904061d98 - () https://git.kernel.org/stable/c/435ecc978c3d5d0c4e172ec5b956dc1904061d98 - Patch
References () https://git.kernel.org/stable/c/6eca23100e9030725f69c1babacd58803f29ec8d - () https://git.kernel.org/stable/c/6eca23100e9030725f69c1babacd58803f29ec8d - Patch
References () https://git.kernel.org/stable/c/a83e1385b780d41307433ddbc86e3c528db031f0 - () https://git.kernel.org/stable/c/a83e1385b780d41307433ddbc86e3c528db031f0 - Patch
References () https://git.kernel.org/stable/c/ae465109d82f4fb03c5adbe85f2d6a6a3d59124c - () https://git.kernel.org/stable/c/ae465109d82f4fb03c5adbe85f2d6a6a3d59124c - Patch
References () https://git.kernel.org/stable/c/dc5017c57f5eee80020c73ff8b67ba7f9fd08b1f - () https://git.kernel.org/stable/c/dc5017c57f5eee80020c73ff8b67ba7f9fd08b1f - Patch
References () https://git.kernel.org/stable/c/ddc1f5f124479360a1fd43f73be950781d172239 - () https://git.kernel.org/stable/c/ddc1f5f124479360a1fd43f73be950781d172239 - Patch
References () https://git.kernel.org/stable/c/e21a4c9129c72fa54dd00f5ebf71219b41d43c04 - () https://git.kernel.org/stable/c/e21a4c9129c72fa54dd00f5ebf71219b41d43c04 - Patch
CPE cpe:2.3:o:linux:linux_kernel:6.10:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.10:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.10:rc4:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.10:rc3:*:*:*:*:*:*
CWE CWE-476
First Time Linux linux Kernel
Linux
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5

21 Nov 2024, 09:32

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/434c6b924e1f4c219aab2d9e05fe79c5364e37d3 - () https://git.kernel.org/stable/c/434c6b924e1f4c219aab2d9e05fe79c5364e37d3 -
References () https://git.kernel.org/stable/c/435ecc978c3d5d0c4e172ec5b956dc1904061d98 - () https://git.kernel.org/stable/c/435ecc978c3d5d0c4e172ec5b956dc1904061d98 -
References () https://git.kernel.org/stable/c/6eca23100e9030725f69c1babacd58803f29ec8d - () https://git.kernel.org/stable/c/6eca23100e9030725f69c1babacd58803f29ec8d -
References () https://git.kernel.org/stable/c/a83e1385b780d41307433ddbc86e3c528db031f0 - () https://git.kernel.org/stable/c/a83e1385b780d41307433ddbc86e3c528db031f0 -
References () https://git.kernel.org/stable/c/ae465109d82f4fb03c5adbe85f2d6a6a3d59124c - () https://git.kernel.org/stable/c/ae465109d82f4fb03c5adbe85f2d6a6a3d59124c -
References () https://git.kernel.org/stable/c/dc5017c57f5eee80020c73ff8b67ba7f9fd08b1f - () https://git.kernel.org/stable/c/dc5017c57f5eee80020c73ff8b67ba7f9fd08b1f -
References () https://git.kernel.org/stable/c/ddc1f5f124479360a1fd43f73be950781d172239 - () https://git.kernel.org/stable/c/ddc1f5f124479360a1fd43f73be950781d172239 -
References () https://git.kernel.org/stable/c/e21a4c9129c72fa54dd00f5ebf71219b41d43c04 - () https://git.kernel.org/stable/c/e21a4c9129c72fa54dd00f5ebf71219b41d43c04 -
Summary
  • (es) En el kernel de Linux, se resolvió la siguiente vulnerabilidad: ACPICA: Revertir "ACPICA: evitar Información: mapeo de múltiples BAR. Su kernel está bien". Deshaga las modificaciones realizadas en el commit d410ee5109a1 ("ACPICA: evite "Información: mapeo de varias BAR. Su kernel está bien.""). El propósito inicial de esté commit fue evitar que las asignaciones de memoria para regiones de operación se superpongan en los límites de las páginas, ya que puede generar advertencias si hay diferentes atributos de página presentes. Sin embargo, se descubrió que cuando surge esta situación, el mapeo continúa hasta el final del límite, pero todavía hay un intento de leer/escribir en toda la longitud del mapa, lo que lleva a una deferencia del puntero NULL. Por ejemplo, si se realiza una solicitud de asignación de cuatro bytes pero solo se asigna un byte porque llega al final del límite de la página actual, aún se realiza un intento de lectura/escritura de cuatro bytes, lo que resulta en una deferencia de puntero NULL. En su lugar, asigne toda la longitud, ya que la especificación ACPI no exige que deba estar dentro del mismo límite de página. Está permitido mapearlo en diferentes regiones.

12 Jul 2024, 13:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-07-12 13:15

Updated : 2025-03-06 12:53

NVD link : CVE-2024-40984

Mitre link : CVE-2024-40984

CVE.ORG link : CVE-2024-40984

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-476

NULL Pointer Dereference