CVE-2024-57878

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue is related to the Linux kernel's ptrace system call, specifically the arm64 architecture. The problem arises from the fpmr set() function not initializing the temporary fpmr variable, which can lead to an arbitrary value being written back to target->thread.uw.fpmr when a SETREGSET call with a length of zero is made. This could potentially leak up to 64 bits of memory from the kernel stack. The read is limited to a specific slot on the stack, and there is no write mechanism provided by the issue. The fix involves initializing the temporary value before copying the regset from userspace.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.