CVE-2024-38614

CVE-2024-38614

High · published June 19, 2024

CVSS v3.1
7.8
EPSS
0%
Percentile
11.7
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

openrisc: traps: Don't send signals to kernel mode threads

OpenRISC exception handling sends signals to user processes on floating

point exceptions and trap instructions (for debugging) among others.

There is a bug where the trap handling logic may send signals to kernel

threads, we should not send these signals to kernel threads, if that

happens we treat it as an error.

This patch adds conditions to die if the kernel receives these

exceptions in kernel mode code.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00218 · 11.7th percentile
Published
2024-06-19T18:15Z
Affected products (3)
ProductVersionsFixed in
linux/linux_kernel≥ 6.4, < 6.6.336.6.33
linux/linux_kernel≥ 6.7, < 6.8.126.8.12
linux/linux_kernel≥ 6.9, < 6.9.36.9.3
References (8)
EPSS history
Timeline
  • 19 JUN 13:56Z
    openrisc: traps: Don't send signals to kernel mode threads
    cvelistv5