CVE-2024-11263CWE-270

arch: riscv: userspace: potential security risk when CONFIG_RISCV_GP=y

Critical · published November 15, 2024

CVSS v3.1
9.4
EPSS
0%
Percentile
5.4
In the wild
Unconfirmed
What it is

🔥 A misconfigured Global Pointer can lead to unexpected behaviors in your RISC-V applications, potentially compromising your entire system! Think of the Global Pointer as a mail carrier who has been told to deliver packages to a location that's 800 bytes off — instead of getting the right address, they keep dropping mail into the wrong place, causing chaos in your mailbox! This misdirection can lead to severe issues like data corruption and unexpected behavior, exposing you to serious vulnerabilities. With an attacker capitalizing on this, they could manipulate or access sensitive data, making the risk absolutely devastating. Envision a world where your applications are acting unpredictably — not a great scenario!

Put simply

Think of the Global Pointer as a mail carrier who has been told to deliver packages to a location that's 800 bytes off — instead of getting the right address, they keep dropping mail into the wrong place, causing chaos in your mailbox! The vulnerability arises when the Global Pointer (GP) is set to point 800 bytes past the start of the .sdata section, causing linker issues that can affect global symbol accesses. This misconfiguration might allow for unintended memory manipulations.

What to do

This misdirection can lead to severe issues like data corruption and unexpected behavior, exposing you to serious vulnerabilities. With an attacker capitalizing on this, they could manipulate or access sensitive data, making the risk absolutely devastating. Envision a world where your applications are acting unpredictably — not a great scenario! To remediate this, ensure that CONFIG_RISCV_GP is set correctly and thoroughly review your linkage settings. It's crucial to patch your systems and test them to ensure everything is pointing in the right direction! You've got this! Follow these steps to secure your systems, and soon you'll be a security hero! 🦸

The record
Technical detail
CVSS v3.1
9.4 · CRITICAL
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00165 · 5.4th percentile
Weakness
CWE-270 · Privilege Context Switching Error
Published
2024-11-15T22:53Z
EPSS history
Timeline
  • 15 NOV 22:53Z
    arch: riscv: userspace: potential security risk when CONFIG_RISCV_GP=y
    cvelistv5