Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2024-40963— mips: bmips: BCM6358: make sure CBR is correctly set

Quick assessment

Affected
Linux Linux
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel 存在安全漏洞，该漏洞源于 mips:bmips:BCM6358 组件在调用 arch_sync_dma_for_cpu_all 时，由于 CBR 地址被设置为 0，可能导致内核崩溃。

AI Predicted 5.3 Difficulty: Theoretical EPSS 0.29% · P20

Possible ATT&CK Techniques 1 AI

T1564 · Hide Artifacts

Affected Version Matrix 22

VendorProduct Version RangeStatus
Linux Linux d65de5ee8b72868fbbbd39ca73017d0e526fa13a< 10afe5f7d30f6fe50c2b1177549d0e04921fc373 affected
47a449ec09b4479b89dcc6b27ec3829fc82ffafb< 36d771ce6028b886e18a4a8956a5d23688e4e13d affected
65b723644294f1d79770704162c0e8d1f700b6f1< 89167072fd249e5f23ae2f8093f87da5925cef27 affected
2cdbcff99f15db86a10672fb220379a1ae46ccae< 6c0f6ccd939166f56a904c792d7fcadae43b9085 affected
ab327f8acdf8d06601fbf058859a539a9422afff< 2cd4854ef14a487bcfb76c7980675980cad27b52 affected
ab327f8acdf8d06601fbf058859a539a9422afff< da895fd6da438af8d9326b8f02d715a9c76c3b5b affected
ab327f8acdf8d06601fbf058859a539a9422afff< ce5cdd3b05216b704a704f466fb4c2dff3778caf affected
288c96aa5b5526cd4a946e84ef85e165857693b5 affected
… +14 more rows
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2024-40963

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
mips: bmips: BCM6358: make sure CBR is correctly set
Source: CVE Program / CVE List V5
Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved: mips: bmips: BCM6358: make sure CBR is correctly set It was discovered that some device have CBR address set to 0 causing kernel panic when arch_sync_dma_for_cpu_all is called. This was notice in situation where the system is booted from TP1 and BMIPS_GET_CBR() returns 0 instead of a valid address and !!(read_c0_brcm_cmt_local() & (1 << 31)); not failing. The current check whether RAC flush should be disabled or not are not enough hence lets check if CBR is a valid address or not.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
Linux kernel 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel 存在安全漏洞，该漏洞源于 mips:bmips:BCM6358 组件在调用 arch_sync_dma_for_cpu_all 时，由于 CBR 地址被设置为 0，可能导致内核崩溃。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
Linux Linux d65de5ee8b72868fbbbd39ca73017d0e526fa13a ~ 10afe5f7d30f6fe50c2b1177549d0e04921fc373 -
Linux Linux 6.3 -

II. Public POCs for CVE-2024-40963

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2024-40963

请登录查看更多情报信息。

Other References for CVE-2024-40963 (7)

Same Patch Batch · Linux · 2024-07-12 · 122 CVEs total

CVE-2024-40937 9.8 CRITICAL gve: Clear napi->skb before dev_kfree_skb_any()
CVE-2024-40907 9.8 CRITICAL ionic: fix kernel panic in XDP_TX action
CVE-2024-40999 9.8 CRITICAL net: ena: Add validation for completion descriptors consistency
CVE-2024-40923 9.8 CRITICAL vmxnet3: disable rx data ring on dma allocation failure
CVE-2024-40983 9.8 CRITICAL tipc: force a dst refcount before doing decryption
CVE-2024-40910 8.8 HIGH ax25: Fix refcount imbalance on inbound connections
CVE-2024-40911 8.8 HIGH wifi: cfg80211: Lock wiphy in cfg80211_get_station
CVE-2024-40941 8.1 HIGH wifi: iwlwifi: mvm: don't read past the mfuart notifcation
CVE-2024-40953 7.9 HIGH KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
CVE-2024-40947 7.8 HIGH ima: Avoid blocking in RCU read-side critical section
CVE-2024-39495 7.8 HIGH greybus: Fix use-after-free bug in gb_interface_release due to race condition.
CVE-2024-40909 7.8 HIGH bpf: Fix a potential use-after-free in bpf_link_free()
CVE-2024-40949 7.8 HIGH mm: shmem: fix getting incorrect lruvec when replacing a shmem folio
CVE-2024-40991 7.8 HIGH dmaengine: ti: k3-udma-glue: Fix of_k3_udma_glue_parse_chn_by_id()
CVE-2024-40990 7.8 HIGH RDMA/mlx5: Add check for srq max_sge attribute
CVE-2024-40989 7.8 HIGH KVM: arm64: Disassociate vcpus from redistributor region on teardown
CVE-2024-40925 7.8 HIGH block: fix request.queuelist usage in flush
CVE-2024-40984 7.8 HIGH ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
CVE-2024-40924 7.8 HIGH drm/i915/dpt: Make DPT object unshrinkable
CVE-2024-40970 7.8 HIGH Avoid hw_desc array overrun in dw-axi-dmac

Showing top 20 of 122 CVEs. View all on vendor page &rarr; →

IV. Related Vulnerabilities

Same product: Linux
Same vendor: Linux

V. Comments for CVE-2024-40963

No comments yet

Leave a comment