NVD Vulnerability Detail

CVE-2024-46689

Summary	In the Linux kernel, the following vulnerability has been resolved: soc: qcom: cmd-db: Map shared memory as WC, not WB Linux does not write into cmd-db region. This region of memory is write protected by XPU. XPU may sometime falsely detect clean cache eviction as "write" into the write protected region leading to secure interrupt which causes an endless loop somewhere in Trust Zone. The only reason it is working right now is because Qualcomm Hypervisor maps the same region as Non-Cacheable memory in Stage 2 translation tables. The issue manifests if we want to use another hypervisor (like Xen or KVM), which does not know anything about those specific mappings. Changing the mapping of cmd-db memory from MEMREMAP_WB to MEMREMAP_WT/WC removes dependency on correct mappings in Stage 2 tables. This patch fixes the issue by updating the mapping to MEMREMAP_WC. I tested this on SA8155P with Xen.
Publication Date	Sept. 13, 2024, 3:15 p.m.
Registration Date	Sept. 13, 2024, 8 p.m.
Last Update	Sept. 21, 2024, 12:52 a.m.

Affected software configurations

Related information, measures and tools

No	URL	タグ
1	https://git.kernel.org/stable/c/0ee9594c974368a17e85a431e9fe1c14fb65c278	Patch
2	https://git.kernel.org/stable/c/f5a5a5a0e95f36e2792d48e6e4b64e665eb01374	Patch
3	https://git.kernel.org/stable/c/eaff392c1e34fb77cc61505a31b0191e5e46e271	Patch
4	https://git.kernel.org/stable/c/d9d48d70e922b272875cda60d2ada89291c840cf	Patch
5	https://git.kernel.org/stable/c/ef80520be0ff78ae5ed44cb6eee1525e65bebe70	Patch
6	https://git.kernel.org/stable/c/62c2d63605ca25b5db78a347ed303c0a0a77d5b4	Patch
7	https://git.kernel.org/stable/c/f9bb896eab221618927ae6a2f1d566567999839d	Patch

Common Vulnerabilities List

No	CWE	Name	URL
1	CWE-787	境界外書き込み	https://cwe.mitre.org/data/definitions/787.html

JVN Vulnerability Information

Linux の Linux Kernel における境界外書き込みに関する脆弱性

Title	Linux の Linux Kernel における境界外書き込みに関する脆弱性
Summary	Linux の Linux Kernel には、境界外書き込みに関する脆弱性が存在します。
Possible impacts	サービス運用妨害 (DoS) 状態にされる可能性があります。
Solution	ベンダより正式な対策が公開されています。ベンダ情報を参照して適切な対策を実施してください。
Publication Date	July 28, 2024, midnight
Registration Date	Sept. 25, 2024, 11:59 a.m.
Last Update	Sept. 2, 2025, 3:18 p.m.

Affected System

Linux

Linux Kernel 4.18 以上 5.4.283 未満

Linux Kernel 5.11 以上 5.15.166 未満

Linux Kernel 5.16 以上 6.1.108 未満

Linux Kernel 5.5 以上 5.10.225 未満

Linux Kernel 6.11

Linux Kernel 6.2 以上 6.6.49 未満

Linux Kernel 6.7 以上 6.10.8 未満

CVE (情報セキュリティ共通脆弱性識別子)

No	Name	URL
Common Vulnerabilities and Exposures (CVE)
1	CVE-2024-46689	https://www.cve.org/CVERecord?id=CVE-2024-46689
National Vulnerability Database (NVD)
2	CVE-2024-46689	https://nvd.nist.gov/vuln/detail/CVE-2024-46689

CWE (共通脆弱性タイプ一覧)

No	Name	URL
JVNDB
1	CWE-787	https://cwe.mitre.org/data/definitions/787.html

ベンダー情報

No	Name	URL
Kernel.org git repositories
1	soc: qcom: cmd-db: Map shared memory as WC, not WB (0ee9594)	https://git.kernel.org/stable/c/0ee9594c974368a17e85a431e9fe1c14fb65c278
2	soc: qcom: cmd-db: Map shared memory as WC, not WB (62c2d63)	https://git.kernel.org/stable/c/62c2d63605ca25b5db78a347ed303c0a0a77d5b4
3	soc: qcom: cmd-db: Map shared memory as WC, not WB (d9d48d7)	https://git.kernel.org/stable/c/d9d48d70e922b272875cda60d2ada89291c840cf
4	soc: qcom: cmd-db: Map shared memory as WC, not WB (eaff392)	https://git.kernel.org/stable/c/eaff392c1e34fb77cc61505a31b0191e5e46e271
5	soc: qcom: cmd-db: Map shared memory as WC, not WB (ef80520)	https://git.kernel.org/stable/c/ef80520be0ff78ae5ed44cb6eee1525e65bebe70
6	soc: qcom: cmd-db: Map shared memory as WC, not WB (f5a5a5a)	https://git.kernel.org/stable/c/f5a5a5a0e95f36e2792d48e6e4b64e665eb01374
7	soc: qcom: cmd-db: Map shared memory as WC, not WB (f9bb896)	https://git.kernel.org/stable/c/f9bb896eab221618927ae6a2f1d566567999839d
Linux Kernel
8	Linux Kernel Archives	https://www.kernel.org

その他

No	Name	URL
ICS-CERT ADVISORY
1	ICSA-25-226-07	https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07
JVN
2	JVNVU#92169998	https://jvn.jp/vu/JVNVU92169998/index.html

Change Log

No	Changed Details	Date of change
1	[2024年09月25日] 掲載	Sept. 25, 2024, 11:59 a.m.
2	[2025年08月19日] 参考情報：JVN (JVNVU#92169998) を追加参考情報：ICS-CERT ADVISORY (ICSA-25-226-07) を追加	Aug. 19, 2025, 9:37 a.m.