CVE-2024-26761

MEDIUM

Linux Kernel 5.19-6.1.79, 6.2-6.6.18, 6.7-6.7.6 - Denial of Service via CXL HDM Decoder Initialization

Title source: llm
STIX 2.1

Description

In the Linux kernel, the following vulnerability has been resolved: cxl/pci: Fix disabling memory if DVSEC CXL Range does not match a CFMWS window The Linux CXL subsystem is built on the assumption that HPA == SPA. That is, the host physical address (HPA) the HDM decoder registers are programmed with are system physical addresses (SPA). During HDM decoder setup, the DVSEC CXL range registers (cxl-3.1, 8.1.3.8) are checked if the memory is enabled and the CXL range is in a HPA window that is described in a CFMWS structure of the CXL host bridge (cxl-3.1, 9.18.1.3). Now, if the HPA is not an SPA, the CXL range does not match a CFMWS window and the CXL memory range will be disabled then. The HDM decoder stops working which causes system memory being disabled and further a system hang during HDM decoder initialization, typically when a CXL enabled kernel boots. Prevent a system hang and do not disable the HDM decoder if the decoder's CXL range is not found in a CFMWS window. Note the change only fixes a hardware hang, but does not implement HPA/SPA translation. Support for this can be added in a follow on patch series.

Scores

CVSS v3 5.5
EPSS 0.0024
EPSS Percentile 14.7%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

Status published
Products (15)
linux/Kernel 5.19.0 - 6.1.80linux
linux/Kernel 6.2.0 - 6.6.19linux
linux/Kernel 6.7.0 - 6.7.7linux
Linux/Linux < 5.19
Linux/Linux 34e37b4c432cd0f1842b352fde4b8878b4166888 - 031217128990d7f0ab8c46db1afb3cf1e075fd29
Linux/Linux 34e37b4c432cd0f1842b352fde4b8878b4166888 - 0cab687205986491302cd2e440ef1d253031c221
Linux/Linux 34e37b4c432cd0f1842b352fde4b8878b4166888 - 2cc1a530ab31c65b52daf3cb5d0883c8b614ea69
Linux/Linux 34e37b4c432cd0f1842b352fde4b8878b4166888 - 3a3181a71935774bda2398451256d7441426420b
Linux/Linux 5.19
Linux/Linux 6.1.80 - 6.1.*
... and 5 more
Published Apr 03, 2024
Tracked Since Feb 18, 2026