by Kastro
Paper/Archive/CVE-2024-11263

CVE-2024-11263

zephyrproject-rtos Zephyr — arch: riscv: userspace: potential security risk when CONFIG_RISCV_GP=y

EPSS 0.2%CVSS 9.4
critical.is priorityof 100
29
CVSS 9.4 (CNA)9.4 / 10 × 3028.2Not in CISA KEV+300.0EPSS percentile 5.7.057 × 201.1No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

When the Global Pointer (GP) relative addressing is enabled (CONFIG_RISCV_GP=y), the gp reg points at 0x800 bytes past the start of the .sdata section which is then used by the linker to relax accesses to global symbols.

Affected

ProductAffectedFixed inSource
Zephyr≤ 3.7–CNA
zephyr≤ 3.7–CISA-ADP

Scores by source

zephyr (CNA)9.4CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: total

References

refgithub.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-jjf3-7x72-pqm9