CVE-2024-35995

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.37

Description The issue is related to the ACPI CPPC (Collaborative Processor Performance Control) in the Linux kernel, where using bit width for system memory accesses could lead to issues since it can be any 8-bit value and may not always be on a clean 8b boundary. This was discovered on the Cobalt 100 platform. The problem causes a kernel panic due to an asynchronous SError interrupt. To fix this, the kernel now uses access width to determine the size and shifts and masks the bits accordingly for read/write operations, with a fallback to bit width if access width is not set.

Recommendations For Linux kernel versions prior to 6.6.37, update to version 6.6.37 or later to resolve the issue.