Auth bypass in Linux
CVE-2024-26705
In the Linux kernel, the following vulnerability has been resolved: parisc: BTLB: Fix crash when setting up BTLB at CPU bringup When using hotplug and bringing up a 32-bit CPU, ask the firmware about the BTLB information to set up the static (block) TLB entries. For that write access to the static btlb_info struct is needed, but since it is marked __ro_after_init the kernel segfaults with missing write permissions. Fix the crash by dropping the __ro_after_init annotation.
Vulnerability class: Broken Access Control
EPSS: 0.002 (9.4th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 5.5 (Medium). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H.
Affected products
- Linux — versions e5ef93d02d6c9cc3a14e7348481c9e41a528caa1, 6.6, 0
- Linux Linux_kernel — versions 6.8
Weakness classification (CWE)
References
Frequently asked questions
- What is CVE-2024-26705?
- CVE-2024-26705 is a medium-severity vulnerability in Linux, classified under Missing Authorization. CVSS score: 5.5/10. Published 2024-04-03.
- How severe is CVE-2024-26705?
- Medium severity. CVSS v3 base score is 5.5 out of 10.