CVE-2024-53228

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue concerns an out-of-bounds array access in the Linux kernel, specifically in the kvm riscv vcpu sbi init() function. The entry->ext idx can contain an out-of-bound index, which is used as a special marker for base extensions that cannot be disabled. However, when traversing the extensions, this special marker is not checked before indexing the array, leading to the out-of-bounds access. An out-of-bounds check has been added to the function to resolve this issue.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.