From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from smtp.kernel.org (aws-us-west-2-korg-mail-1.web.codeaurora.org [10.30.226.201]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id 9DF761487EA for ; Wed, 3 Apr 2024 14:56:50 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=10.30.226.201 ARC-Seal:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1712156210; cv=none; b=cdeP9MFlw+N61qR4gVsxvpLVmEAEhWpS9ZwG3PP+KPEPDSI7IMe46iVTDVt6fcCO4UPPDuJXizknPLPN2ohBh+RsFoIaXcsogkpdWYnF7A++dl7E/84xhvBJ9jwkGR7a4rX/eGhIvJ7zUi2jcBiDGq0BKnb10NuuWwyyEFGAU6Y= ARC-Message-Signature:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1712156210; c=relaxed/simple; bh=XLmVVqMpKJELlBL3AniIokDgLLMm9pWN9Tu1qCBlBmo=; h=From:To:Cc:Subject:Date:Message-ID:MIME-Version; b=tEy/RiQCNGP5bgZCuxwjlqd+VvrAhpmC7Lqll8PJemZbGfMxxFynzdIRug5OvpyttzyJO2orGWYa49CpTNKSNZnW7eaQQ2x/4RXlG4mr86UT4Kx5hB3V9DMomzRhWc/wE0OPcqTXblgKtczRRlHYT/T3tzFppEKJO05Kq7+5yGc= ARC-Authentication-Results:i=1; smtp.subspace.kernel.org; dkim=pass (1024-bit key) header.d=linuxfoundation.org header.i=@linuxfoundation.org header.b=Hhm8hc5O; arc=none smtp.client-ip=10.30.226.201 Authentication-Results: smtp.subspace.kernel.org; dkim=pass (1024-bit key) header.d=linuxfoundation.org header.i=@linuxfoundation.org header.b="Hhm8hc5O" Received: by smtp.kernel.org (Postfix) with ESMTPSA id C4EBDC433F1; Wed, 3 Apr 2024 14:56:49 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=linuxfoundation.org; s=korg; t=1712156210; bh=XLmVVqMpKJELlBL3AniIokDgLLMm9pWN9Tu1qCBlBmo=; h=From:To:Cc:Subject:Date:Reply-to:From; b=Hhm8hc5Omiy4Kx7PnUSJdmk31mlyjioYJ4yN9OERhHos0qDnSh1pGVYePcAYLdVNu 9OTzUGwfsoEY6astCB8npxYT7JRIFcHG/20PxIS/L6bwIzCKnJ+0ua2fNVPQcg65mo LPuxf2AcuOn0j9Ivor+0hA3B5E32jL3HPvE7WmmU= From: Greg Kroah-Hartman To: linux-cve-announce@vger.kernel.org Cc: Greg Kroah-Hartman Subject: CVE-2024-26705: parisc: BTLB: Fix crash when setting up BTLB at CPU bringup Date: Wed, 3 Apr 2024 16:55:56 +0200 Message-ID: <2024040340-CVE-2024-26705-c0ff@gregkh> X-Mailer: git-send-email 2.44.0 Precedence: bulk X-Mailing-List: linux-cve-announce@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 Reply-to: , X-Developer-Signature: v=1; a=openpgp-sha256; l=2181; i=gregkh@linuxfoundation.org; h=from:subject:message-id; bh=XLmVVqMpKJELlBL3AniIokDgLLMm9pWN9Tu1qCBlBmo=; b=owGbwMvMwCRo6H6F97bub03G02pJDGm8uW9KJ/4vfOm0cpXine2nP6QvXr915Qn7987TFifW/ d9yMlpqUkcsC4MgE4OsmCLLl208R/dXHFL0MrQ9DTOHlQlkCAMXpwBM5Jw7w4L1x9NYF85c3HIv 5XZQ+JkJGxZF6PMzzE/KvmY95cD0bBv52ImGl1ZynZj1/DwA X-Developer-Key: i=gregkh@linuxfoundation.org; a=openpgp; fpr=F4B60CC5BF78C2214A313DCB3147D40DDB2DFB29 Content-Transfer-Encoding: 8bit Description =========== In the Linux kernel, the following vulnerability has been resolved: parisc: BTLB: Fix crash when setting up BTLB at CPU bringup When using hotplug and bringing up a 32-bit CPU, ask the firmware about the BTLB information to set up the static (block) TLB entries. For that write access to the static btlb_info struct is needed, but since it is marked __ro_after_init the kernel segfaults with missing write permissions. Fix the crash by dropping the __ro_after_init annotation. The Linux kernel CVE team has assigned CVE-2024-26705 to this issue. Affected and fixed versions =========================== Issue introduced in 6.6 with commit e5ef93d02d6c and fixed in 6.6.18 with commit 54944f45470a Issue introduced in 6.6 with commit e5ef93d02d6c and fixed in 6.7.6 with commit aa52be552766 Issue introduced in 6.6 with commit e5ef93d02d6c and fixed in 6.8 with commit 913b9d443a01 Please see https://www.kernel.org for a full list of currently supported kernel versions by the kernel community. Unaffected versions might change over time as fixes are backported to older supported kernel versions. The official CVE entry at https://cve.org/CVERecord/?id=CVE-2024-26705 will be updated if fixes are backported, please check that for the most up to date information about this issue. Affected files ============== The file(s) affected by this issue are: arch/parisc/kernel/cache.c Mitigation ========== The Linux kernel CVE team recommends that you update to the latest stable kernel version for this, and many other bugfixes. Individual changes are never tested alone, but rather are part of a larger kernel release. Cherry-picking individual commits is not recommended or supported by the Linux kernel community at all. If however, updating to the latest release is impossible, the individual changes to resolve this issue can be found at these commits: https://git.kernel.org/stable/c/54944f45470af5965fb9c28cf962ec30f38a8f5b https://git.kernel.org/stable/c/aa52be55276614d33f22fbe7da36c40d6432d10b https://git.kernel.org/stable/c/913b9d443a0180cf0de3548f1ab3149378998486