CVE-2024-46774

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue is related to the prevention of Spectre v1 gadget construction in the sys rtas() function. The 'nargs' and 'nret' locals come directly from a user-supplied buffer and are used as indexes into a small stack-based array and as inputs to copy to user() after they are subject to bounds checks. To address this, array index nospec() is used after the bounds checks to clamp these values for speculative execution. The Smatch tool warns of a potential spectre issue with 'args.args'.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.