What’s Vulnerable › Vulnerabilities

CVE-2024-26705: parisc: BTLB: Fix crash when setting up BTLB at CPU bringup

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-04-03 · updated 2026-06-17
• Weakness: CWE-862

Description

In the Linux kernel, the following vulnerability has been resolved: parisc: BTLB: Fix crash when setting up BTLB at CPU bringup When using hotplug and bringing up a 32-bit CPU, ask the firmware about the BTLB information to set up the static (block) TLB entries. For that write access to the static btlb_info struct is needed, but since it is marked __ro_after_init the kernel segfaults with missing write permissions. Fix the crash by dropping the __ro_after_init annotation.

Affected products

• Linux kernel: from 6.6 before 6.6.18; from 6.7 before 6.7.6; 6.8-rc1, 6.8-rc2 — fixed in 6.6.18, 6.7.6

How to fix

Upgrade to a fixed version: Linux kernel 6.6.18, 6.7.6. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/54944f45470af5965fb9c28cf962ec30f38a8f5b
• https://git.kernel.org/stable/c/913b9d443a0180cf0de3548f1ab3149378998486
• https://git.kernel.org/stable/c/aa52be55276614d33f22fbe7da36c40d6432d10b
• https://git.kernel.org/stable/c/54944f45470af5965fb9c28cf962ec30f38a8f5b
• https://git.kernel.org/stable/c/913b9d443a0180cf0de3548f1ab3149378998486
• https://git.kernel.org/stable/c/aa52be55276614d33f22fbe7da36c40d6432d10b

Get alerted when CVE-2024-26705 or the next vulnerability affects your stack