Description
In the Linux kernel, the following vulnerability has been resolved: arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry In a review discussion of the changes to support vCPU hotplug where a check was added on the GICC being enabled if was online, it was noted that there is need to map back to the cpu and use that to index into a cpumask. As such, a valid ID is needed. If an MPIDR check fails in acpi_map_gic_cpu_interface() it is possible for the entry in cpu_madt_gicc[cpu] == NULL. This function would then cause a NULL pointer dereference. Whilst a path to trigger this has not been established, harden this caller against the possibility.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
0be7320a635c2e434e8b67e0e9474a85ceb421c4 to < f57769ff6fa7f97f1296965f20e8a2bb3ee9fd0faffected0be7320a635c2e434e8b67e0e9474a85ceb421c4 to < 4c3b21204abb4fa3ab310fbbb5cf7f0e85f3a1bcaffected0be7320a635c2e434e8b67e0e9474a85ceb421c4 to < 945be49f4e832a9184c313fdf8917475438a795baffected0be7320a635c2e434e8b67e0e9474a85ceb421c4 to < 40cae0df42e5e7f7a1c0f32deed9c4027c1ba94eaffected0be7320a635c2e434e8b67e0e9474a85ceb421c4 to < 62ca6d3a905b4c40cd942f3cc645a6718f8bc7e7affected0be7320a635c2e434e8b67e0e9474a85ceb421c4 to < bc7fbb37e3d2df59336eadbd6a56be632e3c7df7affected0be7320a635c2e434e8b67e0e9474a85ceb421c4 to < 2488444274c70038eb6b686cba5f1ce48ebb9cddaffected
Linux Linux
Default version status: affected
3.7affected0 to < 3.7unaffected5.4.284 to ≤ 5.4.*unaffected5.10.226 to ≤ 5.10.*unaffected5.15.167 to ≤ 5.15.*unaffected6.1.110 to ≤ 6.1.*unaffected6.6.51 to ≤ 6.6.*unaffected6.10.10 to ≤ 6.10.*unaffected6.11 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/f57769ff6fa7f97f1296965f20e8a2bb3ee9fd0f ↗
- https://git.kernel.org/stable/c/4c3b21204abb4fa3ab310fbbb5cf7f0e85f3a1bc ↗
- https://git.kernel.org/stable/c/945be49f4e832a9184c313fdf8917475438a795b ↗
- https://git.kernel.org/stable/c/40cae0df42e5e7f7a1c0f32deed9c4027c1ba94e ↗
- https://git.kernel.org/stable/c/62ca6d3a905b4c40cd942f3cc645a6718f8bc7e7 ↗
- https://git.kernel.org/stable/c/bc7fbb37e3d2df59336eadbd6a56be632e3c7df7 ↗
- https://git.kernel.org/stable/c/2488444274c70038eb6b686cba5f1ce48ebb9cdd ↗
- https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html ↗
- https://lists.debian.org/debian-lts-announce/2024/10/msg00003.html ↗