CVE - CVE-2024-36965

CVE-ID
CVE-2024-36965	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
In the Linux kernel, the following vulnerability has been resolved: remoteproc: mediatek: Make sure IPI buffer fits in L2TCM The IPI buffer location is read from the firmware that we load to the System Companion Processor, and it's not granted that both the SRAM (L2TCM) size that is defined in the devicetree node is large enough for that, and while this is especially true for multi-core SCP, it's still useful to check on single-core variants as well. Failing to perform this check may make this driver perform R/W operations out of the L2TCM boundary, resulting (at best) in a kernel panic. To fix that, check that the IPI buffer fits, otherwise return a failure and refuse to boot the relevant SCP core (or the SCP at all, if this is single core).
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:https://git.kernel.org/stable/c/00548ac6b14428719c970ef90adae2b3b48c0cdf URL:https://git.kernel.org/stable/c/00548ac6b14428719c970ef90adae2b3b48c0cdf MISC:https://git.kernel.org/stable/c/1d9e2de24533daca36cbf09e8d8596bf72b526b2 URL:https://git.kernel.org/stable/c/1d9e2de24533daca36cbf09e8d8596bf72b526b2 MISC:https://git.kernel.org/stable/c/26c6d7dc8c6a9fde9d362ab2eef6390efeff145e URL:https://git.kernel.org/stable/c/26c6d7dc8c6a9fde9d362ab2eef6390efeff145e MISC:https://git.kernel.org/stable/c/331f91d86f71d0bb89a44217cc0b2a22810bbd42 URL:https://git.kernel.org/stable/c/331f91d86f71d0bb89a44217cc0b2a22810bbd42 MISC:https://git.kernel.org/stable/c/36c79eb4845551e9f6d28c663b38ce0ab03b84a9 URL:https://git.kernel.org/stable/c/36c79eb4845551e9f6d28c663b38ce0ab03b84a9 MISC:https://git.kernel.org/stable/c/838b49e211d59fa827ff9df062d4020917cffbdf URL:https://git.kernel.org/stable/c/838b49e211d59fa827ff9df062d4020917cffbdf
Assigning CNA
kernel.org
Date Record Created
20240530	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20240530)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)