Log in Start free

Vulnerability · Published Jul 30, 2024 · Assigned by Linux

CVE-2024-42230powerpc/pseries: Fix scv instruction crash with kexec

Medium 4.4

In plain English

A medium-severity security flaw in Linux from Linux. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 10% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS NVD)4.4Medium
Exploit odds (30 days)0.2%top 89.8% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

In the Linux kernel, the following vulnerability has been resolved: powerpc/pseries: Fix scv instruction crash with kexec kexec on pseries disables AIL (reloc_on_exc), required for scv instruction support, before other CPUs have been shut down. This means they can execute scv instructions after AIL is disabled, which causes an interrupt at an unexpected entry location that crashes the kernel. Change the kexec sequence to disable AIL after other CPUs have been brought down. As a refresher, the real-mode scv interrupt vector is 0x17000, and the fixed-location head code probably couldn't easily deal with implementing such high addresses so it was just decided not to support that interrupt at all.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Debian:12linux6.1.98-1DEBIAN-CVE-2024-42230
Debian:13linux6.9.9-1DEBIAN-CVE-2024-42230
Debian:14linux6.9.9-1DEBIAN-CVE-2024-42230
Ubuntu:22.04:LTSlinux5.15.0-142.152USN-7591-1
Ubuntu:22.04:LTSlinux5.15.0-142.152UBUNTU-CVE-2024-42230
Ubuntu:24.04:LTSlinux6.8.0-48.48UBUNTU-CVE-2024-42230
Ubuntu:22.04:LTSlinux-allwinner-5.19no fix listedUBUNTU-CVE-2024-42230
Ubuntu:22.04:LTSlinux-aws5.15.0-1086.93UBUNTU-CVE-2024-42230
Ubuntu:22.04:LTSlinux-aws5.15.0-1086.93USN-7591-4
Ubuntu:24.04:LTSlinux-aws6.8.0-1018.20UBUNTU-CVE-2024-42230
Ubuntu:22.04:LTSlinux-aws-5.19no fix listedUBUNTU-CVE-2024-42230
Ubuntu:22.04:LTSlinux-aws-6.2no fix listedUBUNTU-CVE-2024-42230
Ubuntu:22.04:LTSlinux-aws-6.5no fix listedUBUNTU-CVE-2024-42230
Ubuntu:22.04:LTSlinux-aws-6.86.8.0-1018.19~22.04.1UBUNTU-CVE-2024-42230
Ubuntu:22.04:LTSlinux-azure5.15.0-1091.100USN-7597-1
Ubuntu:22.04:LTSlinux-azure5.15.0-1091.100UBUNTU-CVE-2024-42230
Ubuntu:24.04:LTSlinux-azure6.8.0-1017.20UBUNTU-CVE-2024-42230
Ubuntu:22.04:LTSlinux-azure-5.19no fix listedUBUNTU-CVE-2024-42230
Ubuntu:22.04:LTSlinux-azure-6.2no fix listedUBUNTU-CVE-2024-42230
Ubuntu:22.04:LTSlinux-azure-6.5no fix listedUBUNTU-CVE-2024-42230
Ubuntu:22.04:LTSlinux-azure-6.86.8.0-1017.20~22.04.1UBUNTU-CVE-2024-42230
Ubuntu:22.04:LTSlinux-azure-fde5.15.0-1091.100.1UBUNTU-CVE-2024-42230
Ubuntu:22.04:LTSlinux-azure-fde-5.19no fix listedUBUNTU-CVE-2024-42230
Ubuntu:22.04:LTSlinux-azure-fde-6.2no fix listedUBUNTU-CVE-2024-42230
Ubuntu:22.04:LTSlinux-gcp5.15.0-1085.94USN-7591-1
Ubuntu:22.04:LTSlinux-gcp5.15.0-1085.94UBUNTU-CVE-2024-42230
Ubuntu:24.04:LTSlinux-gcp6.8.0-1017.19UBUNTU-CVE-2024-42230
Ubuntu:22.04:LTSlinux-gcp-5.19no fix listedUBUNTU-CVE-2024-42230
Ubuntu:22.04:LTSlinux-gcp-6.2no fix listedUBUNTU-CVE-2024-42230
Ubuntu:22.04:LTSlinux-gcp-6.5no fix listedUBUNTU-CVE-2024-42230
Ubuntu:22.04:LTSlinux-gcp-6.86.8.0-1017.19~22.04.1UBUNTU-CVE-2024-42230
Ubuntu:22.04:LTSlinux-gke5.15.0-1083.89USN-7591-1
Ubuntu:22.04:LTSlinux-gke5.15.0-1083.89UBUNTU-CVE-2024-42230
Ubuntu:24.04:LTSlinux-gke6.8.0-1013.17UBUNTU-CVE-2024-42230
Ubuntu:22.04:LTSlinux-gkeop5.15.0-1068.76UBUNTU-CVE-2024-42230
Ubuntu:22.04:LTSlinux-gkeop5.15.0-1068.76USN-7591-1
Ubuntu:24.04:LTSlinux-gkeop6.8.0-1002.4UBUNTU-CVE-2024-42230
Ubuntu:22.04:LTSlinux-hwe-5.19no fix listedUBUNTU-CVE-2024-42230
Ubuntu:22.04:LTSlinux-hwe-6.2no fix listedUBUNTU-CVE-2024-42230
Ubuntu:22.04:LTSlinux-hwe-6.5no fix listedUBUNTU-CVE-2024-42230
Ubuntu:22.04:LTSlinux-hwe-6.86.8.0-48.48~22.04.1UBUNTU-CVE-2024-42230
Ubuntu:22.04:LTSlinux-ibm5.15.0-1078.81USN-7591-1
Ubuntu:22.04:LTSlinux-ibm5.15.0-1078.81UBUNTU-CVE-2024-42230
Ubuntu:24.04:LTSlinux-ibm6.8.0-1015.15UBUNTU-CVE-2024-42230
Ubuntu:22.04:LTSlinux-ibm-6.86.8.0-1015.15~22.04.1UBUNTU-CVE-2024-42230
Ubuntu:22.04:LTSlinux-intel-iot-realtimeno fix listedUBUNTU-CVE-2024-42230
Ubuntu:22.04:LTSlinux-intel-iotg5.15.0-1081.87USN-7591-5
Ubuntu:22.04:LTSlinux-intel-iotg5.15.0-1081.87UBUNTU-CVE-2024-42230
Ubuntu:22.04:LTSlinux-kvm5.15.0-1082.87USN-7591-1
Ubuntu:22.04:LTSlinux-kvm5.15.0-1082.87UBUNTU-CVE-2024-42230
Ubuntu:22.04:LTSlinux-lowlatency5.15.0-142.152USN-7591-1
Ubuntu:22.04:LTSlinux-lowlatency5.15.0-142.152UBUNTU-CVE-2024-42230
Ubuntu:24.04:LTSlinux-lowlatency6.8.0-48.48.3UBUNTU-CVE-2024-42230
Ubuntu:22.04:LTSlinux-lowlatency-hwe-5.19no fix listedUBUNTU-CVE-2024-42230
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.2no fix listedUBUNTU-CVE-2024-42230
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.5no fix listedUBUNTU-CVE-2024-42230
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.86.8.0-48.48.3~22.04.1UBUNTU-CVE-2024-42230
Ubuntu:22.04:LTSlinux-nvidia5.15.0-1080.81USN-7591-1
Ubuntu:22.04:LTSlinux-nvidia5.15.0-1080.81UBUNTU-CVE-2024-42230
Ubuntu:24.04:LTSlinux-nvidia6.8.0-1017.19UBUNTU-CVE-2024-42230
Ubuntu:22.04:LTSlinux-nvidia-6.2no fix listedUBUNTU-CVE-2024-42230
Ubuntu:22.04:LTSlinux-nvidia-6.5no fix listedUBUNTU-CVE-2024-42230
Ubuntu:22.04:LTSlinux-nvidia-6.86.8.0-1017.19~22.04.1UBUNTU-CVE-2024-42230
Ubuntu:24.04:LTSlinux-nvidia-lowlatency6.8.0-1017.19.1UBUNTU-CVE-2024-42230
Ubuntu:22.04:LTSlinux-nvidia-tegra5.15.0-1039.39UBUNTU-CVE-2024-42230
Ubuntu:22.04:LTSlinux-nvidia-tegra5.15.0-1039.39USN-7591-1
Ubuntu:22.04:LTSlinux-nvidia-tegra-igx5.15.0-1028.28USN-7591-1
Ubuntu:22.04:LTSlinux-nvidia-tegra-igx5.15.0-1028.28UBUNTU-CVE-2024-42230
Ubuntu:22.04:LTSlinux-oem-5.17no fix listedUBUNTU-CVE-2024-42230
Ubuntu:22.04:LTSlinux-oem-6.0no fix listedUBUNTU-CVE-2024-42230
Ubuntu:22.04:LTSlinux-oem-6.1no fix listedUBUNTU-CVE-2024-42230
Ubuntu:22.04:LTSlinux-oem-6.5no fix listedUBUNTU-CVE-2024-42230
Ubuntu:24.04:LTSlinux-oem-6.86.8.0-1016.16UBUNTU-CVE-2024-42230
Ubuntu:22.04:LTSlinux-oracle5.15.0-1083.89USN-7591-1
Ubuntu:22.04:LTSlinux-oracle5.15.0-1083.89UBUNTU-CVE-2024-42230
Ubuntu:24.04:LTSlinux-oracle6.8.0-1015.16UBUNTU-CVE-2024-42230
Ubuntu:22.04:LTSlinux-oracle-6.5no fix listedUBUNTU-CVE-2024-42230
Ubuntu:22.04:LTSlinux-oracle-6.86.8.0-1015.15~22.04.1UBUNTU-CVE-2024-42230
Ubuntu:22.04:LTSlinux-raspi5.15.0-1080.83UBUNTU-CVE-2024-42230
Ubuntu:22.04:LTSlinux-raspi5.15.0-1080.83USN-7591-6
Ubuntu:24.04:LTSlinux-raspi6.8.0-1014.16UBUNTU-CVE-2024-42230
Ubuntu:22.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2024-42230
Ubuntu:22.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2024-42230
Ubuntu:24.04:LTSlinux-riscv6.8.0-48.48.1UBUNTU-CVE-2024-42230
Ubuntu:22.04:LTSlinux-riscv-5.19no fix listedUBUNTU-CVE-2024-42230
Ubuntu:22.04:LTSlinux-riscv-6.5no fix listedUBUNTU-CVE-2024-42230
Ubuntu:22.04:LTSlinux-riscv-6.86.8.0-48.48.1~22.04.2UBUNTU-CVE-2024-42230
Ubuntu:22.04:LTSlinux-starfive-5.19no fix listedUBUNTU-CVE-2024-42230
Ubuntu:22.04:LTSlinux-starfive-6.2no fix listedUBUNTU-CVE-2024-42230
Ubuntu:22.04:LTSlinux-starfive-6.5no fix listedUBUNTU-CVE-2024-42230
Ubuntu:24.04:LTSlinux-xilinx6.8.0-1009.10UBUNTU-CVE-2024-42230
Ubuntu:22.04:LTSlinux-xilinx-zynqmp5.15.0-1050.54USN-7602-1
Ubuntu:22.04:LTSlinux-xilinx-zynqmp5.15.0-1050.54UBUNTU-CVE-2024-42230

Affected products (as reported)

VendorProductVersions
Linux Linux 7fa95f9adaee7e5cbb195d3359741120829e488b – before c550679d604798d9fed8a5b2bb5693448a25407c7fa95f9adaee7e5cbb195d3359741120829e488b – before d10e3c39001e9194b9a1bfd6979bd3fa19dccdc57fa95f9adaee7e5cbb195d3359741120829e488b – before 8c6506616386ce37e59b2745fc481c6713fae4f37fa95f9adaee7e5cbb195d3359741120829e488b – before 21a741eb75f80397e5f7d3739e24d7d75e619011
Linux Linux 5.9

References