CVE-2024-46774
powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
Reported by linux · Published September 18, 2024
In the Linux kernel, the following vulnerability has been resolved: powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas() Smatch warns: arch/powerpc/kernel/rtas.c:1932 __do_sys_rtas() warn: potential spectre issue 'args.args' [r] (local cap) The 'nargs' and 'nret' locals come directly from a user-supplied buffer and are used as indexes into a small stack-based array and as inputs to copy_to_user() after they are subject to bounds checks. Use array_index_nospec() after the bounds checks to clamp these values for speculative execution.
Fixed versions
Upgrade to a fixed version or later. Language registries are listed first, then Linux distributions, then vendor products.
| Package | Ecosystem | Fixed in |
|---|---|---|
| Linux | Linux | d2834ff1d9641a8695a09ea79cd901c7b6d4d05f, b137af795399d8b657bad1646c18561530f35ed1, a262c2dc833f2fe1bd5c53a4d899e7077d3b1da9, 68d8156480940b79227d58865ec5d2947b9384a8, 2.6.12, 0974d03eb479384466d828d65637814bee6b26d7 |
Affected products
| Vendor | Product | Versions |
|---|---|---|
| Linux | Linux | 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 |
| Linux | Linux | 2.6.12, 0, 5.10.237 |
| Linux | Linux | 5.15.181, 5.10.237, 6.1.135 |
| linux | linux_kernel | 2.6.12, 2.6.12, 2.6.12 |
Timeline
- Sep 17, 2024 CVE Published
- Sep 19, 2024 EPSS Score (30 in total, the first dated here)
- Oct 5, 2024 Coalition ESS Score (13 in total, the first dated here)
- Jan 4, 2026 Security Advisory (188 in total, the first dated here)
- May 28, 2026 Distribution Patch (174 in total, the first dated here)
Query this with the API
The same record, from the CLI:
vulnetix vdb vuln CVE-2024-46774
vulnetix vdb fixes CVE-2024-46774Or with curl, using the org id and key from your account page:
curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
"https://api.vdb.vulnetix.com/v2/vuln/CVE-2024-46774/fixes/registry"The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart