CVE-2024-46822

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2024-46822
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2024-46822.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2024-46822
Downstream
Related
Published
2024-09-27T12:39:23.345Z
Modified
2026-05-28T03:55:44.064703224Z
Summary
arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry
Details

In the Linux kernel, the following vulnerability has been resolved:

arm64: acpi: Harden getcpuforacpiid() against missing CPU entry

In a review discussion of the changes to support vCPU hotplug where a check was added on the GICC being enabled if was online, it was noted that there is need to map back to the cpu and use that to index into a cpumask. As such, a valid ID is needed.

If an MPIDR check fails in acpimapgiccpuinterface() it is possible for the entry in cpumadtgicc[cpu] == NULL. This function would then cause a NULL pointer dereference. Whilst a path to trigger this has not been established, harden this caller against the possibility.

Database specific 
{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/46xxx/CVE-2024-46822.json",
    "cna_assigner": "Linux"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
0be7320a635c2e434e8b67e0e9474a85ceb421c4
Fixed
f57769ff6fa7f97f1296965f20e8a2bb3ee9fd0f
Fixed
4c3b21204abb4fa3ab310fbbb5cf7f0e85f3a1bc
Fixed
945be49f4e832a9184c313fdf8917475438a795b
Fixed
40cae0df42e5e7f7a1c0f32deed9c4027c1ba94e
Fixed
62ca6d3a905b4c40cd942f3cc645a6718f8bc7e7
Fixed
bc7fbb37e3d2df59336eadbd6a56be632e3c7df7
Fixed
2488444274c70038eb6b686cba5f1ce48ebb9cdd

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2024-46822.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
3.7.0
Fixed
5.4.284
Type
ECOSYSTEM
Events
Introduced
5.5.0
Fixed
5.10.226
Type
ECOSYSTEM
Events
Introduced
5.11.0
Fixed
5.15.167
Type
ECOSYSTEM
Events
Introduced
5.16.0
Fixed
6.1.110
Type
ECOSYSTEM
Events
Introduced
6.2.0
Fixed
6.6.51
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.10.10

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2024-46822.json"