CVE-2024-26670

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The Linux kernel has a vulnerability related to the ARM64 WORKAROUND SPECULATIVE UNPRIV LOAD workaround. This workaround is used to handle Cortex-A520 erratum 2966298 and Cortex-A510 erratum 3117295. The issue arises because the TLBI+DSB is immediately followed by an LDR, instead of being placed after all explicit memory accesses. The patch fixes this by reworking the logic to place the TLBI+DSB immediately before the ERET, after all explicit memory accesses. The workaround is only applied when KPTI is not in use.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.