In the Linux kernel, the following vulnerability has been resolved:
remoteproc: mediatek: Make sure IPI buffer fits in L2TCM
The IPI buffer location is read from the firmware that we load to the System Companion Processor, and it's not granted that both the SRAM (L2TCM) size that is defined in the devicetree node is large enough for that, and while this is especially true for multi-core SCP, it's still useful to check on single-core variants as well.
Failing to perform this check may make this driver perform R/W operations out of the L2TCM boundary, resulting (at best) in a kernel panic.
To fix that, check that the IPI buffer fits, otherwise return a failure and refuse to boot the relevant SCP core (or the SCP at all, if this is single core).
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Jun 8, 2024 |
| Suse | — | Upgrade kernel-debug-vdsoUpgrade kernel-defaultUpgrade kernel-rt-develUpgrade dtb-amdUpgrade dtb-lgUpgrade dtb-xilinxUpgrade kernel-azure-optionalUpgrade dtb-nvidiaUpgrade cluster-md-kmp-rtUpgrade reiserfs-kmp-azureUpgrade kernel-develUpgrade dtb-caviumUpgrade kernel-64kb-develUpgrade gfs2-kmp-azureUpgrade kernel-source-vanillaUpgrade dtb-renesasUpgrade kernel-default-livepatch-develUpgrade dtb-sprdUpgrade dlm-kmp-rtUpgrade cluster-md-kmp-64kbUpgrade reiserfs-kmp-defaultUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-freescaleUpgrade kernel-debug-develUpgrade dlm-kmp-64kbUpgrade gfs2-kmp-defaultUpgrade ocfs2-kmp-azureUpgrade dtb-mediatekUpgrade kselftests-kmp-azureUpgrade dtb-alteraUpgrade kernel-devel-rtUpgrade kernel-default-livepatchUpgrade kernel-default-baseUpgrade kernel-rt-extraUpgrade kernel-azureUpgrade dtb-exynosUpgrade dtb-hisiliconUpgrade kernel-64kb-extraUpgrade kernel-64kb-optionalUpgrade kernel-debugUpgrade kernel-rt_debug-develUpgrade dtb-allwinnerUpgrade ocfs2-kmp-defaultUpgrade kernel-source-azureUpgrade kernel-symsUpgrade kernel-default-vdsoUpgrade kernel-default-optionalUpgrade kselftests-kmp-64kbUpgrade kernel-rt-livepatchUpgrade reiserfs-kmp-64kbUpgrade kernel-rt-optionalUpgrade dlm-kmp-defaultUpgrade dlm-kmp-azureUpgrade kernel-docs-htmlUpgrade kernel-rtUpgrade cluster-md-kmp-azureUpgrade kernel-rt-vdsoUpgrade ocfs2-kmp-64kbUpgrade kernel-docsUpgrade dtb-marvellUpgrade gfs2-kmp-rtUpgrade kernel-debug-livepatch-develUpgrade kernel-azure-extraUpgrade ocfs2-kmp-rtUpgrade kselftests-kmp-defaultUpgrade kernel-source-rtUpgrade kernel-obs-qaUpgrade gfs2-kmp-64kbUpgrade kernel-kvmsmallUpgrade dtb-rockchipUpgrade dtb-broadcomUpgrade reiserfs-kmp-rtUpgrade kernel-rt-livepatch-develUpgrade kernel-sourceUpgrade kernel-zfcpdumpUpgrade kernel-kvmsmall-develUpgrade kernel-default-base-rebuildUpgrade dtb-apmUpgrade dtb-amazonUpgrade kernel-syms-azureUpgrade cluster-md-kmp-defaultUpgrade kselftests-kmp-rtUpgrade kernel-kvmsmall-vdsoUpgrade kernel-default-extraUpgrade dtb-socionextUpgrade dtb-qcomUpgrade dtb-appleUpgrade dtb-amlogicUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-azure-vdsoUpgrade kernel-64kb-livepatch-develUpgrade kernel-obs-buildUpgrade kernel-devel-azureUpgrade kernel-rt_debugUpgrade kernel-macrosUpgrade kernel-default-develUpgrade kernel-azure-develUpgrade kernel-64kbUpgrade kernel-rt_debug-vdsoUpgrade dtb-armUpgrade kernel-azure-livepatch-develUpgrade kernel-syms-rt | Jul 10, 2024 | Jun 8, 2024 |
| Ubuntu | — | Upgrade linux-image-5.15.0-118-generic-lpaeUpgrade linux-image-lowlatencyUpgrade linux-image-oracleUpgrade linux-image-5.15.0-118-lowlatency-64kUpgrade linux-image-6.8.0-1011-nvidia-64kUpgrade linux-image-azure-cvmUpgrade linux-image-6.8.0-1009-raspiUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-40-generic-64kUpgrade linux-image-azure-fdeUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-6.8.0-1012-gcpUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-awsUpgrade linux-image-5.15.0-1062-intel-iotgUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-5.15.0-1070-azureUpgrade linux-image-5.15.0-1067-awsUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-nvidiaUpgrade linux-image-5.15.0-1050-gkeopUpgrade linux-image-6.8.0-1012-azureUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-gke-5.15Upgrade linux-image-5.15.0-118-generic-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-1008-gkeUpgrade linux-image-6.8.0-1010-oracleUpgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.0-1011-nvidia-lowlatencyUpgrade linux-image-5.15.0-118-genericUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-40-lowlatencyUpgrade linux-image-raspi-nolpaeUpgrade linux-image-raspiUpgrade linux-image-5.15.0-1062-nvidiaUpgrade linux-image-6.8.0-1012-azure-fdeUpgrade linux-image-ibmUpgrade linux-image-6.8.0-40-lowlatency-64kUpgrade linux-image-intelUpgrade linux-image-oem-24.04aUpgrade linux-image-oem-24.04Upgrade linux-image-gkeopUpgrade linux-image-oem-20.04Upgrade linux-image-5.15.0-118-lowlatencyUpgrade linux-image-5.15.0-1035-xilinx-zynqmpUpgrade linux-image-genericUpgrade linux-image-oem-20.04cUpgrade linux-image-5.15.0-1060-ibmUpgrade linux-image-5.15.0-1060-raspiUpgrade linux-image-5.15.0-1065-oracleUpgrade linux-image-azureUpgrade linux-image-oracle-64kUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.15.0-1064-kvmUpgrade linux-image-5.15.0-1066-gcpUpgrade linux-image-5.15.0-1064-gkeUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-5.15.0-1062-nvidia-lowlatencyUpgrade linux-image-6.8.0-1011-nvidia-lowlatency-64kUpgrade linux-image-aws-lts-22.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-nvidia-64kUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-ibm-classicUpgrade linux-image-oem-20.04dUpgrade linux-image-azure-lts-22.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.8.0-1010-oracle-64kUpgrade linux-image-oem-20.04bUpgrade linux-image-gcpUpgrade linux-image-5.15.0-1070-azure-fdeUpgrade linux-image-gkeUpgrade linux-image-intel-iotgUpgrade linux-image-generic-64kUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-6.8.0-1011-nvidiaUpgrade linux-image-kvmUpgrade linux-image-6.8.0-1010-oemUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.8.0-40-genericUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-virtualUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-6.8.0-1010-ibmUpgrade linux-image-6.8.0-1013-aws | Aug 9, 2024 | Jun 8, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 14, 2025 | Jun 8, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub