In the Linux kernel, the following vulnerability has been resolved:
riscv/purgatory: align riscv_kernel_entry
When alignment handling is delegated to the kernel, everything must be word-aligned in purgatory, since the trap handler is then set to the kexec one. Without the alignment, hitting the exception would ultimately crash. On other occasions, the kernel's handler would take care of exceptions. This has been tested on a JH7110 SoC with oreboot and its SBI delegating unaligned access exceptions and the kernel configured to handle them.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Dec 2, 2024 | Aug 21, 2024 |
| Ubuntu | — | Upgrade linux-image-gkeop-6.8Upgrade linux-image-ibmUpgrade linux-image-6.8.0-1018-oemUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-lowlatencyUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.8.0-1019-nvidia-64kUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-oem-22.04aUpgrade linux-image-6.8.0-1015-gkeUpgrade linux-image-nvidia-6.8Upgrade linux-image-nvidiaUpgrade linux-image-genericUpgrade linux-image-virtualUpgrade linux-image-gkeopUpgrade linux-image-6.8.0-1020-awsUpgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-50-lowlatencyUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-oem-22.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-oracleUpgrade linux-image-6.8.0-1019-gcpUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.8.0-50-lowlatency-64kUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-1016-raspiUpgrade linux-image-azure-fdeUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1017-ibmUpgrade linux-image-6.8.0-1002-gkeopUpgrade linux-image-6.8.0-1017-oracle-64kUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-50-generic-64kUpgrade linux-image-oem-22.04bUpgrade linux-image-6.8.0-1017-oracleUpgrade linux-image-oracle-64kUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.8.0-50-genericUpgrade linux-image-awsUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-generic-64kUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-oem-24.04Upgrade linux-image-gkeUpgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-1020-azureUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-raspiUpgrade linux-image-ibm-classicUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.8.0-1020-azure-fdeUpgrade linux-image-oem-22.04cUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.8.0-1019-nvidiaUpgrade linux-image-gcpUpgrade linux-image-oem-24.04aUpgrade linux-image-azureUpgrade linux-image-oem-22.04dUpgrade linux-image-kvmUpgrade linux-image-6.8.0-1019-nvidia-lowlatencyUpgrade linux-image-6.8.0-1019-nvidia-lowlatency-64k | Dec 13, 2024 | Aug 21, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Sep 22, 2025 | Aug 20, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub