NetSight
IP …
medium5.5

CVE-2024-40963

In the Linux kernel, the following vulnerability has been resolved: mips: bmips: BCM6358: make sure CBR is correctly set It was discovered that some device hav…

Impact

In the Linux kernel, the following vulnerability has been resolved: mips: bmips: BCM6358: make sure CBR is correctly set It was discovered that some device have CBR address set to 0 causing kernel panic when arch_sync_dma_for_cpu_all is called. This was notice in situation where the system is booted from TP1 and BMIPS_GET_CBR() returns 0 instead of a valid address and !!(read_c0_brcm_cmt_local() & (1 << 31)); not failing. The current check whether RAC flush should be disabled or not are not enough hence lets check if CBR is a valid address or not.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 5.4.240 before 5.4.279
from 5.10.177 before 5.10.221
from 5.15.106 before 5.15.162
from 6.1.23 before 6.1.96
from 6.2.10 before 6.3
from 6.3.1 before 6.6.36

Weakness classification

CWE-754

References