CVE-2024-40984CWE-476

CVE-2024-40984

High · published July 12, 2024

CVSS v3.1
7.8
EPSS
0%
Percentile
21.4
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."

Undo the modifications made in commit d410ee5109a1 ("ACPICA: avoid

"Info: mapping multiple BARs. Your kernel is fine.""). The initial

purpose of this commit was to stop memory mappings for operation

regions from overlapping page boundaries, as it can trigger warnings

if different page attributes are present.

However, it was found that when this situation arises, mapping

continues until the boundary's end, but there is still an attempt to

read/write the entire length of the map, leading to a NULL pointer

deference. For example, if a four-byte mapping request is made but

only one byte is mapped because it hits the current page boundary's

end, a four-byte read/write attempt is still made, resulting in a NULL

pointer deference.

Instead, map the entire length, as the ACPI specification does not

mandate that it must be within the same page boundary. It is

permissible for it to be mapped across different regions.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00299 · 21.4th percentile
Weakness
CWE-476 · NULL Pointer Dereference
Published
2024-07-12T17:15Z
Affected products (11)
ProductVersionsFixed in
linux/linux_kernel≥ 2.6.32, < 4.19.3174.19.317
linux/linux_kernel≥ 4.20, < 5.4.2795.4.279
linux/linux_kernel≥ 5.5, < 5.10.2215.10.221
linux/linux_kernel≥ 5.11, < 5.15.1625.15.162
linux/linux_kernel≥ 5.16, < 6.1.966.1.96
linux/linux_kernel≥ 6.2, < 6.6.366.6.36
linux/linux_kernel≥ 6.7, < 6.9.76.9.7
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
References (20)
https://git.kernel.org/stable/c/434c6b924e1f4c219aab2d9e05fe79c5364e37d3 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/435ecc978c3d5d0c4e172ec5b956dc1904061d98 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/6eca23100e9030725f69c1babacd58803f29ec8d · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/a83e1385b780d41307433ddbc86e3c528db031f0 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/ae465109d82f4fb03c5adbe85f2d6a6a3d59124c · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/dc5017c57f5eee80020c73ff8b67ba7f9fd08b1f · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/ddc1f5f124479360a1fd43f73be950781d172239 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/e21a4c9129c72fa54dd00f5ebf71219b41d43c04 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/434c6b924e1f4c219aab2d9e05fe79c5364e37d3 · af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/435ecc978c3d5d0c4e172ec5b956dc1904061d98 · af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/6eca23100e9030725f69c1babacd58803f29ec8d · af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/a83e1385b780d41307433ddbc86e3c528db031f0 · af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/ae465109d82f4fb03c5adbe85f2d6a6a3d59124c · af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/dc5017c57f5eee80020c73ff8b67ba7f9fd08b1f · af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/ddc1f5f124479360a1fd43f73be950781d172239 · af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/e21a4c9129c72fa54dd00f5ebf71219b41d43c04 · af854a3a-2127-422b-91ae-364da2661108https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html · af854a3a-2127-422b-91ae-364da2661108https://cert-portal.siemens.com/productcert/html/ssa-265688.html · 0b142b55-0307-4c5a-b3c9-f314f3fb7c5ehttps://cert-portal.siemens.com/productcert/html/ssa-355557.html · 0b142b55-0307-4c5a-b3c9-f314f3fb7c5ehttps://cert-portal.siemens.com/productcert/html/ssa-613116.html · 0b142b55-0307-4c5a-b3c9-f314f3fb7c5e
EPSS history
Timeline
  • 12 JUL 12:33Z
    ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
    cvelistv5