In the Linux kernel, the following vulnerability has been resolved:
mips: bmips: BCM6358: make sure CBR is correctly set
It was discovered that some device have CBR address set to 0 causing kernel panic when archsyncdmaforcpu_all is called.
This was notice in situation where the system is booted from TP1 and BMIPSGETCBR() returns 0 instead of a valid address and !!(readc0brcmcmtlocal() & (1 << 31)); not failing.
The current check whether RAC flush should be disabled or not are not enough hence lets check if CBR is a valid address or not.
{
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/40xxx/CVE-2024-40963.json",
"cna_assigner": "Linux"
}"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2024-40963.json"
[
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@6c0f6ccd939166f56a904c792d7fcadae43b9085",
"signature_type": "Function",
"digest": {
"function_hash": "180657546597404570320576228754862850344",
"length": 122.0
},
"deprecated": false,
"target": {
"file": "arch/mips/bmips/setup.c",
"function": "bcm6358_quirks"
},
"id": "CVE-2024-40963-0c336d2c",
"signature_version": "v1"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ce5cdd3b05216b704a704f466fb4c2dff3778caf",
"signature_type": "Line",
"digest": {
"line_hashes": [
"126766009048854213049679840370356970774",
"185229051117507405344544318642213147674",
"116380387864261328090309754706946772169",
"300640815667058609830653343942430892061"
],
"threshold": 0.9
},
"deprecated": false,
"target": {
"file": "arch/mips/bmips/setup.c"
},
"id": "CVE-2024-40963-295cb974",
"signature_version": "v1"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@6c0f6ccd939166f56a904c792d7fcadae43b9085",
"signature_type": "Line",
"digest": {
"line_hashes": [
"126766009048854213049679840370356970774",
"185229051117507405344544318642213147674",
"116380387864261328090309754706946772169",
"300640815667058609830653343942430892061"
],
"threshold": 0.9
},
"deprecated": false,
"target": {
"file": "arch/mips/bmips/setup.c"
},
"id": "CVE-2024-40963-64282672",
"signature_version": "v1"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ce5cdd3b05216b704a704f466fb4c2dff3778caf",
"signature_type": "Function",
"digest": {
"function_hash": "180657546597404570320576228754862850344",
"length": 122.0
},
"deprecated": false,
"target": {
"file": "arch/mips/bmips/setup.c",
"function": "bcm6358_quirks"
},
"id": "CVE-2024-40963-eb96444f",
"signature_version": "v1"
}
]