CVE-2024-26761

cxl/pci: Fix disabling memory if DVSEC CXL Range does not match a CFMWS window

published April 3, 2024

CVSS
—
EPSS
0%
Percentile
13.7
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

cxl/pci: Fix disabling memory if DVSEC CXL Range does not match a CFMWS window

The Linux CXL subsystem is built on the assumption that HPA == SPA.

That is, the host physical address (HPA) the HDM decoder registers are

programmed with are system physical addresses (SPA).

During HDM decoder setup, the DVSEC CXL range registers (cxl-3.1,

8.1.3.8) are checked if the memory is enabled and the CXL range is in

a HPA window that is described in a CFMWS structure of the CXL host

bridge (cxl-3.1, 9.18.1.3).

Now, if the HPA is not an SPA, the CXL range does not match a CFMWS

window and the CXL memory range will be disabled then. The HDM decoder

stops working which causes system memory being disabled and further a

system hang during HDM decoder initialization, typically when a CXL

enabled kernel boots.

Prevent a system hang and do not disable the HDM decoder if the

decoder's CXL range is not found in a CFMWS window.

Note the change only fixes a hardware hang, but does not implement

HPA/SPA translation. Support for this can be added in a follow on

patch series.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00236 · 13.7th percentile
Published
2024-04-03T17:00Z
EPSS history
Timeline
  • 03 APR 17:00Z
    cxl/pci: Fix disabling memory if DVSEC CXL Range does not match a CFMWS window
    cvelistv5