CVE-2024-46822
CVSS 3.1 Score 5.5 of 10 (medium)
Details
Published Sep 27, 2024
Updated: Oct 2, 2024
CWE ID 476
Summary
CVE-2024-46822 is a vulnerability affecting the Linux kernel's ACPI subsystem. During the implementation of vCPU hotplug support, a check was added to ensure the GICC is enabled before mapping back to a CPU and indexing into a cpumask. However, if an MPIDR check fails in acpi_map_gic_cpu_interface(), the CPU entry in cpu_madt_gicc may be NULL, causing a NULL pointer dereference. Although no known exploit exists, this vulnerability has been addressed to prevent potential crashes or unauthorized access.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.