CVE-2024-40963

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A vulnerability has been discovered in the Linux kernel where some devices have a CBR address set to 0, causing a kernel panic when arch sync dma for cpu all is called. This issue occurs when the system is booted from TP1 and BMIPS GET CBR() returns 0 instead of a valid address. The current checks for disabling RAC flush are insufficient, and it is necessary to verify if the CBR is a valid address.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.