PT-2024-30725
CVE-2024-43868
·
Published
2024-07-19
·
Updated
2025-10-10
Description by
CVSS 3.1
5.5
MediumMetricsAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
The issue is related to alignment handling in the Linux kernel's riscv/purgatory component. When alignment handling is delegated to the kernel, everything must be word-aligned in purgatory. Without proper alignment, hitting an exception would ultimately crash. The kernel's handler would take care of exceptions on other occasions. This has been tested on a JH7110 SoC with oreboot and its SBI delegating unaligned access exceptions, and the kernel configured to handle them.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Found an issue in the description? Have something to add? Feel free to write us 👾