CVE-2024-35995 (GCVE-0-2024-35995)
Vulnerability from cvelistv5 – Published: 2024-05-20 09:47 – Updated: 2026-05-11 20:15
VLAI
EPSS
VEX
Title
ACPI: CPPC: Use access_width over bit_width for system memory accesses
Summary
In the Linux kernel, the following vulnerability has been resolved:
ACPI: CPPC: Use access_width over bit_width for system memory accesses
To align with ACPI 6.3+, since bit_width can be any 8-bit value, it
cannot be depended on to be always on a clean 8b boundary. This was
uncovered on the Cobalt 100 platform.
SError Interrupt on CPU26, code 0xbe000011 -- SError
CPU: 26 PID: 1510 Comm: systemd-udevd Not tainted 5.15.2.1-13 #1
Hardware name: MICROSOFT CORPORATION, BIOS MICROSOFT CORPORATION
pstate: 62400009 (nZCv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--)
pc : cppc_get_perf_caps+0xec/0x410
lr : cppc_get_perf_caps+0xe8/0x410
sp : ffff8000155ab730
x29: ffff8000155ab730 x28: ffff0080139d0038 x27: ffff0080139d0078
x26: 0000000000000000 x25: ffff0080139d0058 x24: 00000000ffffffff
x23: ffff0080139d0298 x22: ffff0080139d0278 x21: 0000000000000000
x20: ffff00802b251910 x19: ffff0080139d0000 x18: ffffffffffffffff
x17: 0000000000000000 x16: ffffdc7e111bad04 x15: ffff00802b251008
x14: ffffffffffffffff x13: ffff013f1fd63300 x12: 0000000000000006
x11: ffffdc7e128f4420 x10: 0000000000000000 x9 : ffffdc7e111badec
x8 : ffff00802b251980 x7 : 0000000000000000 x6 : ffff0080139d0028
x5 : 0000000000000000 x4 : ffff0080139d0018 x3 : 00000000ffffffff
x2 : 0000000000000008 x1 : ffff8000155ab7a0 x0 : 0000000000000000
Kernel panic - not syncing: Asynchronous SError Interrupt
CPU: 26 PID: 1510 Comm: systemd-udevd Not tainted
5.15.2.1-13 #1
Hardware name: MICROSOFT CORPORATION, BIOS MICROSOFT CORPORATION
Call trace:
dump_backtrace+0x0/0x1e0
show_stack+0x24/0x30
dump_stack_lvl+0x8c/0xb8
dump_stack+0x18/0x34
panic+0x16c/0x384
add_taint+0x0/0xc0
arm64_serror_panic+0x7c/0x90
arm64_is_fatal_ras_serror+0x34/0xa4
do_serror+0x50/0x6c
el1h_64_error_handler+0x40/0x74
el1h_64_error+0x7c/0x80
cppc_get_perf_caps+0xec/0x410
cppc_cpufreq_cpu_init+0x74/0x400 [cppc_cpufreq]
cpufreq_online+0x2dc/0xa30
cpufreq_add_dev+0xc0/0xd4
subsys_interface_register+0x134/0x14c
cpufreq_register_driver+0x1b0/0x354
cppc_cpufreq_init+0x1a8/0x1000 [cppc_cpufreq]
do_one_initcall+0x50/0x250
do_init_module+0x60/0x27c
load_module+0x2300/0x2570
__do_sys_finit_module+0xa8/0x114
__arm64_sys_finit_module+0x2c/0x3c
invoke_syscall+0x78/0x100
el0_svc_common.constprop.0+0x180/0x1a0
do_el0_svc+0x84/0xa0
el0_svc+0x2c/0xc0
el0t_64_sync_handler+0xa4/0x12c
el0t_64_sync+0x1a4/0x1a8
Instead, use access_width to determine the size and use the offset and
width to shift and mask the bits to read/write out. Make sure to add a
check for system memory since pcc redefines the access_width to
subspace id.
If access_width is not set, then fall back to using bit_width.
[ rjw: Subject and changelog edits, comment adjustments ]
Severity
No CVSS data available.
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2024-05-21 15:11 UTC
Assigner
References
7 references
Impacted products
2 products
| Vendor | Product | Version | CPE status | |
|---|---|---|---|---|
| Linux | Linux |
Affected:
5bbb86aa4b8d84395e42cd05448820651d79f349 , < 01fc53be672acae37e611c80cc0b4f3939584de3
(git)
Affected: 5bbb86aa4b8d84395e42cd05448820651d79f349 , < 1b890ae474d19800a6be1696df7fb4d9a41676e4 (git) Affected: 5bbb86aa4b8d84395e42cd05448820651d79f349 , < 6cb6b12b78dcd8867a3fdbb1b6d0ed1df2b208d1 (git) Affected: 5bbb86aa4b8d84395e42cd05448820651d79f349 , < 2f4a4d63a193be6fd530d180bb13c3592052904c (git) |
guessed | |
| Linux | Linux |
Affected:
4.9
Unaffected: 0 , < 4.9 (semver) Unaffected: 6.1.90 , ≤ 6.1.* (semver) Unaffected: 6.6.30 , ≤ 6.6.* (semver) Unaffected: 6.8.9 , ≤ 6.8.* (semver) Unaffected: 6.9 , ≤ * (original_commit_for_fix) |
guessed |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2024-35995",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-05-21T15:11:28.341623Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2024-06-04T17:34:14.842Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
},
{
"providerMetadata": {
"dateUpdated": "2024-08-02T03:30:12.364Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_transferred"
],
"url": "https://git.kernel.org/stable/c/4949affd5288b867cdf115f5b08d6166b2027f87"
},
{
"tags": [
"x_transferred"
],
"url": "https://git.kernel.org/stable/c/b54c4632946ae42f2b39ed38abd909bbf78cbcc2"
},
{
"tags": [
"x_transferred"
],
"url": "https://git.kernel.org/stable/c/6dfd79ed04c578f1d9a9a41ba5b2015cf9f03fc3"
},
{
"tags": [
"x_transferred"
],
"url": "https://git.kernel.org/stable/c/01fc53be672acae37e611c80cc0b4f3939584de3"
},
{
"tags": [
"x_transferred"
],
"url": "https://git.kernel.org/stable/c/1b890ae474d19800a6be1696df7fb4d9a41676e4"
},
{
"tags": [
"x_transferred"
],
"url": "https://git.kernel.org/stable/c/6cb6b12b78dcd8867a3fdbb1b6d0ed1df2b208d1"
},
{
"tags": [
"x_transferred"
],
"url": "https://git.kernel.org/stable/c/2f4a4d63a193be6fd530d180bb13c3592052904c"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "Linux",
"programFiles": [
"drivers/acpi/cppc_acpi.c"
],
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"vendor": "Linux",
"versions": [
{
"lessThan": "01fc53be672acae37e611c80cc0b4f3939584de3",
"status": "affected",
"version": "5bbb86aa4b8d84395e42cd05448820651d79f349",
"versionType": "git"
},
{
"lessThan": "1b890ae474d19800a6be1696df7fb4d9a41676e4",
"status": "affected",
"version": "5bbb86aa4b8d84395e42cd05448820651d79f349",
"versionType": "git"
},
{
"lessThan": "6cb6b12b78dcd8867a3fdbb1b6d0ed1df2b208d1",
"status": "affected",
"version": "5bbb86aa4b8d84395e42cd05448820651d79f349",
"versionType": "git"
},
{
"lessThan": "2f4a4d63a193be6fd530d180bb13c3592052904c",
"status": "affected",
"version": "5bbb86aa4b8d84395e42cd05448820651d79f349",
"versionType": "git"
}
]
},
{
"defaultStatus": "affected",
"product": "Linux",
"programFiles": [
"drivers/acpi/cppc_acpi.c"
],
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"vendor": "Linux",
"versions": [
{
"status": "affected",
"version": "4.9"
},
{
"lessThan": "4.9",
"status": "unaffected",
"version": "0",
"versionType": "semver"
},
{
"lessThanOrEqual": "6.1.*",
"status": "unaffected",
"version": "6.1.90",
"versionType": "semver"
},
{
"lessThanOrEqual": "6.6.*",
"status": "unaffected",
"version": "6.6.30",
"versionType": "semver"
},
{
"lessThanOrEqual": "6.8.*",
"status": "unaffected",
"version": "6.8.9",
"versionType": "semver"
},
{
"lessThanOrEqual": "*",
"status": "unaffected",
"version": "6.9",
"versionType": "original_commit_for_fix"
}
]
}
],
"cpeApplicability": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionEndExcluding": "6.1.90",
"versionStartIncluding": "4.9",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionEndExcluding": "6.6.30",
"versionStartIncluding": "4.9",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionEndExcluding": "6.8.9",
"versionStartIncluding": "4.9",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionEndExcluding": "6.9",
"versionStartIncluding": "4.9",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "In the Linux kernel, the following vulnerability has been resolved:\n\nACPI: CPPC: Use access_width over bit_width for system memory accesses\n\nTo align with ACPI 6.3+, since bit_width can be any 8-bit value, it\ncannot be depended on to be always on a clean 8b boundary. This was\nuncovered on the Cobalt 100 platform.\n\nSError Interrupt on CPU26, code 0xbe000011 -- SError\n CPU: 26 PID: 1510 Comm: systemd-udevd Not tainted 5.15.2.1-13 #1\n Hardware name: MICROSOFT CORPORATION, BIOS MICROSOFT CORPORATION\n pstate: 62400009 (nZCv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--)\n pc : cppc_get_perf_caps+0xec/0x410\n lr : cppc_get_perf_caps+0xe8/0x410\n sp : ffff8000155ab730\n x29: ffff8000155ab730 x28: ffff0080139d0038 x27: ffff0080139d0078\n x26: 0000000000000000 x25: ffff0080139d0058 x24: 00000000ffffffff\n x23: ffff0080139d0298 x22: ffff0080139d0278 x21: 0000000000000000\n x20: ffff00802b251910 x19: ffff0080139d0000 x18: ffffffffffffffff\n x17: 0000000000000000 x16: ffffdc7e111bad04 x15: ffff00802b251008\n x14: ffffffffffffffff x13: ffff013f1fd63300 x12: 0000000000000006\n x11: ffffdc7e128f4420 x10: 0000000000000000 x9 : ffffdc7e111badec\n x8 : ffff00802b251980 x7 : 0000000000000000 x6 : ffff0080139d0028\n x5 : 0000000000000000 x4 : ffff0080139d0018 x3 : 00000000ffffffff\n x2 : 0000000000000008 x1 : ffff8000155ab7a0 x0 : 0000000000000000\n Kernel panic - not syncing: Asynchronous SError Interrupt\n CPU: 26 PID: 1510 Comm: systemd-udevd Not tainted\n5.15.2.1-13 #1\n Hardware name: MICROSOFT CORPORATION, BIOS MICROSOFT CORPORATION\n Call trace:\n dump_backtrace+0x0/0x1e0\n show_stack+0x24/0x30\n dump_stack_lvl+0x8c/0xb8\n dump_stack+0x18/0x34\n panic+0x16c/0x384\n add_taint+0x0/0xc0\n arm64_serror_panic+0x7c/0x90\n arm64_is_fatal_ras_serror+0x34/0xa4\n do_serror+0x50/0x6c\n el1h_64_error_handler+0x40/0x74\n el1h_64_error+0x7c/0x80\n cppc_get_perf_caps+0xec/0x410\n cppc_cpufreq_cpu_init+0x74/0x400 [cppc_cpufreq]\n cpufreq_online+0x2dc/0xa30\n cpufreq_add_dev+0xc0/0xd4\n subsys_interface_register+0x134/0x14c\n cpufreq_register_driver+0x1b0/0x354\n cppc_cpufreq_init+0x1a8/0x1000 [cppc_cpufreq]\n do_one_initcall+0x50/0x250\n do_init_module+0x60/0x27c\n load_module+0x2300/0x2570\n __do_sys_finit_module+0xa8/0x114\n __arm64_sys_finit_module+0x2c/0x3c\n invoke_syscall+0x78/0x100\n el0_svc_common.constprop.0+0x180/0x1a0\n do_el0_svc+0x84/0xa0\n el0_svc+0x2c/0xc0\n el0t_64_sync_handler+0xa4/0x12c\n el0t_64_sync+0x1a4/0x1a8\n\nInstead, use access_width to determine the size and use the offset and\nwidth to shift and mask the bits to read/write out. Make sure to add a\ncheck for system memory since pcc redefines the access_width to\nsubspace id.\n\nIf access_width is not set, then fall back to using bit_width.\n\n[ rjw: Subject and changelog edits, comment adjustments ]"
}
],
"providerMetadata": {
"dateUpdated": "2026-05-11T20:15:16.281Z",
"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"shortName": "Linux"
},
"references": [
{
"url": "https://git.kernel.org/stable/c/01fc53be672acae37e611c80cc0b4f3939584de3"
},
{
"url": "https://git.kernel.org/stable/c/1b890ae474d19800a6be1696df7fb4d9a41676e4"
},
{
"url": "https://git.kernel.org/stable/c/6cb6b12b78dcd8867a3fdbb1b6d0ed1df2b208d1"
},
{
"url": "https://git.kernel.org/stable/c/2f4a4d63a193be6fd530d180bb13c3592052904c"
}
],
"title": "ACPI: CPPC: Use access_width over bit_width for system memory accesses",
"x_generator": {
"engine": "bippy-1.2.0"
}
}
},
"cveMetadata": {
"assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"assignerShortName": "Linux",
"cveId": "CVE-2024-35995",
"datePublished": "2024-05-20T09:47:59.057Z",
"dateReserved": "2024-05-17T13:50:33.148Z",
"dateUpdated": "2026-05-11T20:15:16.281Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"vulnerability-lookup:meta": {
"epss": {
"cve": "CVE-2024-35995",
"date": "2026-09-16",
"epss": "0.0021",
"percentile": "0.11471"
},
"fkie_nvd": {
"descriptions": "[{\"lang\": \"en\", \"value\": \"In the Linux kernel, the following vulnerability has been resolved:\\n\\nACPI: CPPC: Use access_width over bit_width for system memory accesses\\n\\nTo align with ACPI 6.3+, since bit_width can be any 8-bit value, it\\ncannot be depended on to be always on a clean 8b boundary. This was\\nuncovered on the Cobalt 100 platform.\\n\\nSError Interrupt on CPU26, code 0xbe000011 -- SError\\n CPU: 26 PID: 1510 Comm: systemd-udevd Not tainted 5.15.2.1-13 #1\\n Hardware name: MICROSOFT CORPORATION, BIOS MICROSOFT CORPORATION\\n pstate: 62400009 (nZCv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--)\\n pc : cppc_get_perf_caps+0xec/0x410\\n lr : cppc_get_perf_caps+0xe8/0x410\\n sp : ffff8000155ab730\\n x29: ffff8000155ab730 x28: ffff0080139d0038 x27: ffff0080139d0078\\n x26: 0000000000000000 x25: ffff0080139d0058 x24: 00000000ffffffff\\n x23: ffff0080139d0298 x22: ffff0080139d0278 x21: 0000000000000000\\n x20: ffff00802b251910 x19: ffff0080139d0000 x18: ffffffffffffffff\\n x17: 0000000000000000 x16: ffffdc7e111bad04 x15: ffff00802b251008\\n x14: ffffffffffffffff x13: ffff013f1fd63300 x12: 0000000000000006\\n x11: ffffdc7e128f4420 x10: 0000000000000000 x9 : ffffdc7e111badec\\n x8 : ffff00802b251980 x7 : 0000000000000000 x6 : ffff0080139d0028\\n x5 : 0000000000000000 x4 : ffff0080139d0018 x3 : 00000000ffffffff\\n x2 : 0000000000000008 x1 : ffff8000155ab7a0 x0 : 0000000000000000\\n Kernel panic - not syncing: Asynchronous SError Interrupt\\n CPU: 26 PID: 1510 Comm: systemd-udevd Not tainted\\n5.15.2.1-13 #1\\n Hardware name: MICROSOFT CORPORATION, BIOS MICROSOFT CORPORATION\\n Call trace:\\n dump_backtrace+0x0/0x1e0\\n show_stack+0x24/0x30\\n dump_stack_lvl+0x8c/0xb8\\n dump_stack+0x18/0x34\\n panic+0x16c/0x384\\n add_taint+0x0/0xc0\\n arm64_serror_panic+0x7c/0x90\\n arm64_is_fatal_ras_serror+0x34/0xa4\\n do_serror+0x50/0x6c\\n el1h_64_error_handler+0x40/0x74\\n el1h_64_error+0x7c/0x80\\n cppc_get_perf_caps+0xec/0x410\\n cppc_cpufreq_cpu_init+0x74/0x400 [cppc_cpufreq]\\n cpufreq_online+0x2dc/0xa30\\n cpufreq_add_dev+0xc0/0xd4\\n subsys_interface_register+0x134/0x14c\\n cpufreq_register_driver+0x1b0/0x354\\n cppc_cpufreq_init+0x1a8/0x1000 [cppc_cpufreq]\\n do_one_initcall+0x50/0x250\\n do_init_module+0x60/0x27c\\n load_module+0x2300/0x2570\\n __do_sys_finit_module+0xa8/0x114\\n __arm64_sys_finit_module+0x2c/0x3c\\n invoke_syscall+0x78/0x100\\n el0_svc_common.constprop.0+0x180/0x1a0\\n do_el0_svc+0x84/0xa0\\n el0_svc+0x2c/0xc0\\n el0t_64_sync_handler+0xa4/0x12c\\n el0t_64_sync+0x1a4/0x1a8\\n\\nInstead, use access_width to determine the size and use the offset and\\nwidth to shift and mask the bits to read/write out. Make sure to add a\\ncheck for system memory since pcc redefines the access_width to\\nsubspace id.\\n\\nIf access_width is not set, then fall back to using bit_width.\\n\\n[ rjw: Subject and changelog edits, comment adjustments ]\"}, {\"lang\": \"es\", \"value\": \"En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: ACPI: CPPC: use access_width sobre bit_width para accesos a la memoria del sistema. Para alinearse con ACPI 6.3+, dado que bit_width puede ser cualquier valor de 8 bits, no se puede depender de que est\\u00e9 siempre encendido. un l\\u00edmite limpio de 8b. Esto fue descubierto en la plataforma Cobalt 100. Interrupci\\u00f3n de error en CPU26, c\\u00f3digo 0xbe000011 - CPU de SError: 26 PID: 1510 Comm: systemd-udevd Not tainted 5.15.2.1-13 #1 Nombre de hardware: MICROSOFT CORPORATION, BIOS MICROSOFT CORPORATION pstate: 62400009 (nZCv daif +PAN -UAO + TCO -DIT -SSBS BTYPE=--) pc: cppc_get_perf_caps+0xec/0x410 lr: cppc_get_perf_caps+0xe8/0x410 sp: ffff8000155ab730 x29: ffff8000155ab730 x28: ffff0080139d0038 x27: 0080139d0078 x26: 0000000000000000 x25: ffff0080139d0058 x24: 00000000ffffffff x23: ffff0080139d0298 x22: ffff0080139d0278 x21: 0000000000000000 x20: ffff00802b251910 x19: ffff0080139d0000 x18: ffffffffffffffff x17: 0000000000000000 x16: d04 x15: ffff00802b251008 x14: ffffffffffffffff x13: ffff013f1fd63300 x12: 0000000000000006 x11: ffffdc7e128f4420 x10: 0000000000000000 x9: ffffdc7 e111badec x8: ffff00802b251980 x7: 0000000000000000 x6: ffff0080139d0028 x5 : 0000000000000000 x4 : ffff0080139d0018 x3 : 00000000ffffffff x2 : 0000000000000008 x1 : ffff8000155ab7a0 x0 : 0000000000000000 P\\u00e1nico del kernel - no se sincroniza: SError as\\u00edncrono Interrupci\\u00f3n CPU: 26 PID: 1510 Comunicaci\\u00f3n: systemd-udevd No contaminado 5.15.2.1-13 #1 Nombre de hardware: MICROSOFT CORPORATION, BIOS MICROSOFT CORPORATION Rastreo de llamadas: dump_backtrace+0x0/0x1e0 show_stack+0x24/0x30 dump_stack_lvl+0x8c/0xb8 dump_stack+0x18/0x34 panic+0x16c/0x384 add_taint+0x0/0xc0 arm64_serror_panic+0x7c/0x9 0 arm64_is_fatal_ras_serror+0x34/0xa4 do_serror+ 0x50/0x6c el1h_64_error_handler+0x40/0x74 el1h_64_error+0x7c/0x80 cppc_get_perf_caps+0xec/0x410 cppc_cpufreq_cpu_init+0x74/0x400 [cppc_cpufreq] cpufreq_add_dev+0xc0/0xd4 subsys_interface_register+0x134/0x14c cpufreq_register_driver+0x1b0/0x354 cppc_cpufreq_init+0x1a8/ 0x1000 [cppc_cpufreq] do_one_initcall+0x50/0x250 do_init_module+0x60/0x27c load_module+0x2300/0x2570 __do_sys_finit_module+0xa8/0x114 __arm64_sys_finit_module+0x2c/0x3c invoke_ llamada al sistema+0x78/0x100 el0_svc_common.constprop.0+0x180/0x1a0 do_el0_svc+0x84/0xa0 el0_svc+ 0x2c/0xc0 el0t_64_sync_handler+0xa4/0x12c el0t_64_sync+0x1a4/0x1a8 En su lugar, use access_width para determinar el tama\\u00f1o y use el desplazamiento y el ancho para desplazar y enmascarar los bits para leer/escribir. Aseg\\u00farese de agregar una verificaci\\u00f3n de la memoria del sistema, ya que pcc redefine el ancho de acceso al ID del subespacio. Si access_width no est\\u00e1 configurado, vuelva a utilizar bit_width. [rjw: ediciones de asunto y registro de cambios, ajustes de comentarios]\"}]",
"id": "CVE-2024-35995",
"lastModified": "2024-12-27T13:15:20.103",
"published": "2024-05-20T10:15:13.597",
"references": "[{\"url\": \"https://git.kernel.org/stable/c/01fc53be672acae37e611c80cc0b4f3939584de3\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"}, {\"url\": \"https://git.kernel.org/stable/c/1b890ae474d19800a6be1696df7fb4d9a41676e4\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"}, {\"url\": \"https://git.kernel.org/stable/c/2f4a4d63a193be6fd530d180bb13c3592052904c\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"}, {\"url\": \"https://git.kernel.org/stable/c/4949affd5288b867cdf115f5b08d6166b2027f87\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"}, {\"url\": \"https://git.kernel.org/stable/c/6cb6b12b78dcd8867a3fdbb1b6d0ed1df2b208d1\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"}, {\"url\": \"https://git.kernel.org/stable/c/b54c4632946ae42f2b39ed38abd909bbf78cbcc2\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"}, {\"url\": \"https://git.kernel.org/stable/c/01fc53be672acae37e611c80cc0b4f3939584de3\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://git.kernel.org/stable/c/1b890ae474d19800a6be1696df7fb4d9a41676e4\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://git.kernel.org/stable/c/2f4a4d63a193be6fd530d180bb13c3592052904c\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://git.kernel.org/stable/c/4949affd5288b867cdf115f5b08d6166b2027f87\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://git.kernel.org/stable/c/6cb6b12b78dcd8867a3fdbb1b6d0ed1df2b208d1\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://git.kernel.org/stable/c/6dfd79ed04c578f1d9a9a41ba5b2015cf9f03fc3\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://git.kernel.org/stable/c/b54c4632946ae42f2b39ed38abd909bbf78cbcc2\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}]",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"vulnStatus": "Awaiting Analysis"
},
"microsoft_vex": {
"current_release_date": "2026-03-31T15:12:06.000Z",
"cve": "CVE-2024-35995",
"id": "msrc_CVE-2024-35995",
"initial_release_date": "2024-05-02T07:00:00.000Z",
"product_status:known_affected": "3",
"source": "Microsoft CSAF VEX",
"status": "final",
"title": "ACPI: CPPC: Use access_width over bit_width for system memory accesses",
"url": "https://msrc.microsoft.com/csaf/vex/2024/msrc_cve-2024-35995.json",
"version": "3"
},
"nvd": "{\"cve\":{\"id\":\"CVE-2024-35995\",\"sourceIdentifier\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"published\":\"2024-05-20T10:15:13.597\",\"lastModified\":\"2026-06-17T07:35:54.393\",\"vulnStatus\":\"Analyzed\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"In the Linux kernel, the following vulnerability has been resolved:\\n\\nACPI: CPPC: Use access_width over bit_width for system memory accesses\\n\\nTo align with ACPI 6.3+, since bit_width can be any 8-bit value, it\\ncannot be depended on to be always on a clean 8b boundary. This was\\nuncovered on the Cobalt 100 platform.\\n\\nSError Interrupt on CPU26, code 0xbe000011 -- SError\\n CPU: 26 PID: 1510 Comm: systemd-udevd Not tainted 5.15.2.1-13 #1\\n Hardware name: MICROSOFT CORPORATION, BIOS MICROSOFT CORPORATION\\n pstate: 62400009 (nZCv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--)\\n pc : cppc_get_perf_caps+0xec/0x410\\n lr : cppc_get_perf_caps+0xe8/0x410\\n sp : ffff8000155ab730\\n x29: ffff8000155ab730 x28: ffff0080139d0038 x27: ffff0080139d0078\\n x26: 0000000000000000 x25: ffff0080139d0058 x24: 00000000ffffffff\\n x23: ffff0080139d0298 x22: ffff0080139d0278 x21: 0000000000000000\\n x20: ffff00802b251910 x19: ffff0080139d0000 x18: ffffffffffffffff\\n x17: 0000000000000000 x16: ffffdc7e111bad04 x15: ffff00802b251008\\n x14: ffffffffffffffff x13: ffff013f1fd63300 x12: 0000000000000006\\n x11: ffffdc7e128f4420 x10: 0000000000000000 x9 : ffffdc7e111badec\\n x8 : ffff00802b251980 x7 : 0000000000000000 x6 : ffff0080139d0028\\n x5 : 0000000000000000 x4 : ffff0080139d0018 x3 : 00000000ffffffff\\n x2 : 0000000000000008 x1 : ffff8000155ab7a0 x0 : 0000000000000000\\n Kernel panic - not syncing: Asynchronous SError Interrupt\\n CPU: 26 PID: 1510 Comm: systemd-udevd Not tainted\\n5.15.2.1-13 #1\\n Hardware name: MICROSOFT CORPORATION, BIOS MICROSOFT CORPORATION\\n Call trace:\\n dump_backtrace+0x0/0x1e0\\n show_stack+0x24/0x30\\n dump_stack_lvl+0x8c/0xb8\\n dump_stack+0x18/0x34\\n panic+0x16c/0x384\\n add_taint+0x0/0xc0\\n arm64_serror_panic+0x7c/0x90\\n arm64_is_fatal_ras_serror+0x34/0xa4\\n do_serror+0x50/0x6c\\n el1h_64_error_handler+0x40/0x74\\n el1h_64_error+0x7c/0x80\\n cppc_get_perf_caps+0xec/0x410\\n cppc_cpufreq_cpu_init+0x74/0x400 [cppc_cpufreq]\\n cpufreq_online+0x2dc/0xa30\\n cpufreq_add_dev+0xc0/0xd4\\n subsys_interface_register+0x134/0x14c\\n cpufreq_register_driver+0x1b0/0x354\\n cppc_cpufreq_init+0x1a8/0x1000 [cppc_cpufreq]\\n do_one_initcall+0x50/0x250\\n do_init_module+0x60/0x27c\\n load_module+0x2300/0x2570\\n __do_sys_finit_module+0xa8/0x114\\n __arm64_sys_finit_module+0x2c/0x3c\\n invoke_syscall+0x78/0x100\\n el0_svc_common.constprop.0+0x180/0x1a0\\n do_el0_svc+0x84/0xa0\\n el0_svc+0x2c/0xc0\\n el0t_64_sync_handler+0xa4/0x12c\\n el0t_64_sync+0x1a4/0x1a8\\n\\nInstead, use access_width to determine the size and use the offset and\\nwidth to shift and mask the bits to read/write out. Make sure to add a\\ncheck for system memory since pcc redefines the access_width to\\nsubspace id.\\n\\nIf access_width is not set, then fall back to using bit_width.\\n\\n[ rjw: Subject and changelog edits, comment adjustments ]\"},{\"lang\":\"es\",\"value\":\"En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: ACPI: CPPC: use access_width sobre bit_width para accesos a la memoria del sistema. Para alinearse con ACPI 6.3+, dado que bit_width puede ser cualquier valor de 8 bits, no se puede depender de que est\u00e9 siempre encendido. un l\u00edmite limpio de 8b. Esto fue descubierto en la plataforma Cobalt 100. Interrupci\u00f3n de error en CPU26, c\u00f3digo 0xbe000011 - CPU de SError: 26 PID: 1510 Comm: systemd-udevd Not tainted 5.15.2.1-13 #1 Nombre de hardware: MICROSOFT CORPORATION, BIOS MICROSOFT CORPORATION pstate: 62400009 (nZCv daif +PAN -UAO + TCO -DIT -SSBS BTYPE=--) pc: cppc_get_perf_caps+0xec/0x410 lr: cppc_get_perf_caps+0xe8/0x410 sp: ffff8000155ab730 x29: ffff8000155ab730 x28: ffff0080139d0038 x27: 0080139d0078 x26: 0000000000000000 x25: ffff0080139d0058 x24: 00000000ffffffff x23: ffff0080139d0298 x22: ffff0080139d0278 x21: 0000000000000000 x20: ffff00802b251910 x19: ffff0080139d0000 x18: ffffffffffffffff x17: 0000000000000000 x16: d04 x15: ffff00802b251008 x14: ffffffffffffffff x13: ffff013f1fd63300 x12: 0000000000000006 x11: ffffdc7e128f4420 x10: 0000000000000000 x9: ffffdc7 e111badec x8: ffff00802b251980 x7: 0000000000000000 x6: ffff0080139d0028 x5 : 0000000000000000 x4 : ffff0080139d0018 x3 : 00000000ffffffff x2 : 0000000000000008 x1 : ffff8000155ab7a0 x0 : 0000000000000000 P\u00e1nico del kernel - no se sincroniza: SError as\u00edncrono Interrupci\u00f3n CPU: 26 PID: 1510 Comunicaci\u00f3n: systemd-udevd No contaminado 5.15.2.1-13 #1 Nombre de hardware: MICROSOFT CORPORATION, BIOS MICROSOFT CORPORATION Rastreo de llamadas: dump_backtrace+0x0/0x1e0 show_stack+0x24/0x30 dump_stack_lvl+0x8c/0xb8 dump_stack+0x18/0x34 panic+0x16c/0x384 add_taint+0x0/0xc0 arm64_serror_panic+0x7c/0x9 0 arm64_is_fatal_ras_serror+0x34/0xa4 do_serror+ 0x50/0x6c el1h_64_error_handler+0x40/0x74 el1h_64_error+0x7c/0x80 cppc_get_perf_caps+0xec/0x410 cppc_cpufreq_cpu_init+0x74/0x400 [cppc_cpufreq] cpufreq_add_dev+0xc0/0xd4 subsys_interface_register+0x134/0x14c cpufreq_register_driver+0x1b0/0x354 cppc_cpufreq_init+0x1a8/ 0x1000 [cppc_cpufreq] do_one_initcall+0x50/0x250 do_init_module+0x60/0x27c load_module+0x2300/0x2570 __do_sys_finit_module+0xa8/0x114 __arm64_sys_finit_module+0x2c/0x3c invoke_ llamada al sistema+0x78/0x100 el0_svc_common.constprop.0+0x180/0x1a0 do_el0_svc+0x84/0xa0 el0_svc+ 0x2c/0xc0 el0t_64_sync_handler+0xa4/0x12c el0t_64_sync+0x1a4/0x1a8 En su lugar, use access_width para determinar el tama\u00f1o y use el desplazamiento y el ancho para desplazar y enmascarar los bits para leer/escribir. Aseg\u00farese de agregar una verificaci\u00f3n de la memoria del sistema, ya que pcc redefine el ancho de acceso al ID del subespacio. Si access_width no est\u00e1 configurado, vuelva a utilizar bit_width. [rjw: ediciones de asunto y registro de cambios, ajustes de comentarios]\"}],\"affected\":[{\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"affectedData\":[{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"unaffected\",\"programFiles\":[\"drivers/acpi/cppc_acpi.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"5bbb86aa4b8d84395e42cd05448820651d79f349\",\"lessThan\":\"01fc53be672acae37e611c80cc0b4f3939584de3\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"5bbb86aa4b8d84395e42cd05448820651d79f349\",\"lessThan\":\"1b890ae474d19800a6be1696df7fb4d9a41676e4\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"5bbb86aa4b8d84395e42cd05448820651d79f349\",\"lessThan\":\"6cb6b12b78dcd8867a3fdbb1b6d0ed1df2b208d1\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"5bbb86aa4b8d84395e42cd05448820651d79f349\",\"lessThan\":\"2f4a4d63a193be6fd530d180bb13c3592052904c\",\"versionType\":\"git\",\"status\":\"affected\"}]},{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"affected\",\"programFiles\":[\"drivers/acpi/cppc_acpi.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"4.9\",\"status\":\"affected\"},{\"version\":\"0\",\"lessThan\":\"4.9\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.1.90\",\"lessThanOrEqual\":\"6.1.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.6.30\",\"lessThanOrEqual\":\"6.6.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.8.9\",\"lessThanOrEqual\":\"6.8.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.9\",\"lessThanOrEqual\":\"*\",\"versionType\":\"original_commit_for_fix\",\"status\":\"unaffected\"}]}]}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H\",\"baseScore\":5.5,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.8,\"impactScore\":3.6}],\"ssvcV203\":[{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"ssvcData\":{\"timestamp\":\"2024-05-21T15:11:28.341623Z\",\"id\":\"CVE-2024-35995\",\"options\":[{\"exploitation\":\"none\"},{\"automatable\":\"no\"},{\"technicalImpact\":\"partial\"}],\"role\":\"CISA Coordinator\",\"version\":\"2.0.3\"}}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"NVD-CWE-noinfo\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"6.1.90\",\"matchCriteriaId\":\"5EFC6541-FBE4-4C8D-A751-5658F0AD41C1\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.2\",\"versionEndExcluding\":\"6.6.30\",\"matchCriteriaId\":\"84046DAF-73CF-429D-9BA4-05B658B377B5\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.7\",\"versionEndExcluding\":\"6.8.9\",\"matchCriteriaId\":\"5F9041E5-8358-4EF7-8F98-B812EDE49612\"}]}]}],\"references\":[{\"url\":\"https://git.kernel.org/stable/c/01fc53be672acae37e611c80cc0b4f3939584de3\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/1b890ae474d19800a6be1696df7fb4d9a41676e4\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/2f4a4d63a193be6fd530d180bb13c3592052904c\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/6cb6b12b78dcd8867a3fdbb1b6d0ed1df2b208d1\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/01fc53be672acae37e611c80cc0b4f3939584de3\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/1b890ae474d19800a6be1696df7fb4d9a41676e4\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/2f4a4d63a193be6fd530d180bb13c3592052904c\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/4949affd5288b867cdf115f5b08d6166b2027f87\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/6cb6b12b78dcd8867a3fdbb1b6d0ed1df2b208d1\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/6dfd79ed04c578f1d9a9a41ba5b2015cf9f03fc3\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/b54c4632946ae42f2b39ed38abd909bbf78cbcc2\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]}]}}",
"redhat_vex": {
"aggregate_severity": "Low",
"current_release_date": "2026-06-28T07:54:41+00:00",
"cve": "CVE-2024-35995",
"id": "CVE-2024-35995",
"initial_release_date": "2024-05-20T00:00:00+00:00",
"product_status:fixed": "280",
"product_status:known_affected": "98",
"product_status:known_not_affected": "22",
"source": "Red Hat CSAF VEX",
"status": "final",
"title": "kernel: ACPI: CPPC: Use access_width over bit_width for system memory accesses",
"url": "https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-35995.json",
"version": "3"
},
"suse_vex": {
"aggregate_severity": "moderate",
"current_release_date": "2026-09-03T16:42:02Z",
"cve": "CVE-2024-35995",
"id": "CVE-2024-35995",
"initial_release_date": "2024-05-21T01:58:23Z",
"product_status:known_affected": "476",
"product_status:known_not_affected": "8",
"product_status:recommended": "725",
"source": "SUSE CSAF VEX",
"status": "interim",
"title": "SUSE CVE CVE-2024-35995",
"url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2024-35995.json",
"version": "114"
},
"vulnrichment": {
"containers": "{\"adp\": [{\"title\": \"CVE Program Container\", \"references\": [{\"url\": \"https://git.kernel.org/stable/c/4949affd5288b867cdf115f5b08d6166b2027f87\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://git.kernel.org/stable/c/b54c4632946ae42f2b39ed38abd909bbf78cbcc2\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://git.kernel.org/stable/c/6dfd79ed04c578f1d9a9a41ba5b2015cf9f03fc3\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://git.kernel.org/stable/c/01fc53be672acae37e611c80cc0b4f3939584de3\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://git.kernel.org/stable/c/1b890ae474d19800a6be1696df7fb4d9a41676e4\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://git.kernel.org/stable/c/6cb6b12b78dcd8867a3fdbb1b6d0ed1df2b208d1\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://git.kernel.org/stable/c/2f4a4d63a193be6fd530d180bb13c3592052904c\", \"tags\": [\"x_transferred\"]}], \"providerMetadata\": {\"orgId\": \"af854a3a-2127-422b-91ae-364da2661108\", \"shortName\": \"CVE\", \"dateUpdated\": \"2024-08-02T03:30:12.364Z\"}}, {\"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2024-35995\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2024-05-21T15:11:28.341623Z\"}}}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2024-05-23T19:01:25.143Z\"}, \"title\": \"CISA ADP Vulnrichment\"}], \"cna\": {\"title\": \"ACPI: CPPC: Use access_width over bit_width for system memory accesses\", \"affected\": [{\"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\", \"vendor\": \"Linux\", \"product\": \"Linux\", \"versions\": [{\"status\": \"affected\", \"version\": \"5bbb86aa4b8d84395e42cd05448820651d79f349\", \"lessThan\": \"01fc53be672acae37e611c80cc0b4f3939584de3\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"5bbb86aa4b8d84395e42cd05448820651d79f349\", \"lessThan\": \"1b890ae474d19800a6be1696df7fb4d9a41676e4\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"5bbb86aa4b8d84395e42cd05448820651d79f349\", \"lessThan\": \"6cb6b12b78dcd8867a3fdbb1b6d0ed1df2b208d1\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"5bbb86aa4b8d84395e42cd05448820651d79f349\", \"lessThan\": \"2f4a4d63a193be6fd530d180bb13c3592052904c\", \"versionType\": \"git\"}], \"programFiles\": [\"drivers/acpi/cppc_acpi.c\"], \"defaultStatus\": \"unaffected\"}, {\"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\", \"vendor\": \"Linux\", \"product\": \"Linux\", \"versions\": [{\"status\": \"affected\", \"version\": \"4.9\"}, {\"status\": \"unaffected\", \"version\": \"0\", \"lessThan\": \"4.9\", \"versionType\": \"semver\"}, {\"status\": \"unaffected\", \"version\": \"6.1.90\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"6.1.*\"}, {\"status\": \"unaffected\", \"version\": \"6.6.30\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"6.6.*\"}, {\"status\": \"unaffected\", \"version\": \"6.8.9\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"6.8.*\"}, {\"status\": \"unaffected\", \"version\": \"6.9\", \"versionType\": \"original_commit_for_fix\", \"lessThanOrEqual\": \"*\"}], \"programFiles\": [\"drivers/acpi/cppc_acpi.c\"], \"defaultStatus\": \"affected\"}], \"references\": [{\"url\": \"https://git.kernel.org/stable/c/01fc53be672acae37e611c80cc0b4f3939584de3\"}, {\"url\": \"https://git.kernel.org/stable/c/1b890ae474d19800a6be1696df7fb4d9a41676e4\"}, {\"url\": \"https://git.kernel.org/stable/c/6cb6b12b78dcd8867a3fdbb1b6d0ed1df2b208d1\"}, {\"url\": \"https://git.kernel.org/stable/c/2f4a4d63a193be6fd530d180bb13c3592052904c\"}], \"x_generator\": {\"engine\": \"bippy-1.2.0\"}, \"descriptions\": [{\"lang\": \"en\", \"value\": \"In the Linux kernel, the following vulnerability has been resolved:\\n\\nACPI: CPPC: Use access_width over bit_width for system memory accesses\\n\\nTo align with ACPI 6.3+, since bit_width can be any 8-bit value, it\\ncannot be depended on to be always on a clean 8b boundary. This was\\nuncovered on the Cobalt 100 platform.\\n\\nSError Interrupt on CPU26, code 0xbe000011 -- SError\\n CPU: 26 PID: 1510 Comm: systemd-udevd Not tainted 5.15.2.1-13 #1\\n Hardware name: MICROSOFT CORPORATION, BIOS MICROSOFT CORPORATION\\n pstate: 62400009 (nZCv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--)\\n pc : cppc_get_perf_caps+0xec/0x410\\n lr : cppc_get_perf_caps+0xe8/0x410\\n sp : ffff8000155ab730\\n x29: ffff8000155ab730 x28: ffff0080139d0038 x27: ffff0080139d0078\\n x26: 0000000000000000 x25: ffff0080139d0058 x24: 00000000ffffffff\\n x23: ffff0080139d0298 x22: ffff0080139d0278 x21: 0000000000000000\\n x20: ffff00802b251910 x19: ffff0080139d0000 x18: ffffffffffffffff\\n x17: 0000000000000000 x16: ffffdc7e111bad04 x15: ffff00802b251008\\n x14: ffffffffffffffff x13: ffff013f1fd63300 x12: 0000000000000006\\n x11: ffffdc7e128f4420 x10: 0000000000000000 x9 : ffffdc7e111badec\\n x8 : ffff00802b251980 x7 : 0000000000000000 x6 : ffff0080139d0028\\n x5 : 0000000000000000 x4 : ffff0080139d0018 x3 : 00000000ffffffff\\n x2 : 0000000000000008 x1 : ffff8000155ab7a0 x0 : 0000000000000000\\n Kernel panic - not syncing: Asynchronous SError Interrupt\\n CPU: 26 PID: 1510 Comm: systemd-udevd Not tainted\\n5.15.2.1-13 #1\\n Hardware name: MICROSOFT CORPORATION, BIOS MICROSOFT CORPORATION\\n Call trace:\\n dump_backtrace+0x0/0x1e0\\n show_stack+0x24/0x30\\n dump_stack_lvl+0x8c/0xb8\\n dump_stack+0x18/0x34\\n panic+0x16c/0x384\\n add_taint+0x0/0xc0\\n arm64_serror_panic+0x7c/0x90\\n arm64_is_fatal_ras_serror+0x34/0xa4\\n do_serror+0x50/0x6c\\n el1h_64_error_handler+0x40/0x74\\n el1h_64_error+0x7c/0x80\\n cppc_get_perf_caps+0xec/0x410\\n cppc_cpufreq_cpu_init+0x74/0x400 [cppc_cpufreq]\\n cpufreq_online+0x2dc/0xa30\\n cpufreq_add_dev+0xc0/0xd4\\n subsys_interface_register+0x134/0x14c\\n cpufreq_register_driver+0x1b0/0x354\\n cppc_cpufreq_init+0x1a8/0x1000 [cppc_cpufreq]\\n do_one_initcall+0x50/0x250\\n do_init_module+0x60/0x27c\\n load_module+0x2300/0x2570\\n __do_sys_finit_module+0xa8/0x114\\n __arm64_sys_finit_module+0x2c/0x3c\\n invoke_syscall+0x78/0x100\\n el0_svc_common.constprop.0+0x180/0x1a0\\n do_el0_svc+0x84/0xa0\\n el0_svc+0x2c/0xc0\\n el0t_64_sync_handler+0xa4/0x12c\\n el0t_64_sync+0x1a4/0x1a8\\n\\nInstead, use access_width to determine the size and use the offset and\\nwidth to shift and mask the bits to read/write out. Make sure to add a\\ncheck for system memory since pcc redefines the access_width to\\nsubspace id.\\n\\nIf access_width is not set, then fall back to using bit_width.\\n\\n[ rjw: Subject and changelog edits, comment adjustments ]\"}], \"cpeApplicability\": [{\"nodes\": [{\"negate\": false, \"cpeMatch\": [{\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.1.90\", \"versionStartIncluding\": \"4.9\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.6.30\", \"versionStartIncluding\": \"4.9\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.8.9\", \"versionStartIncluding\": \"4.9\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.9\", \"versionStartIncluding\": \"4.9\"}], \"operator\": \"OR\"}]}], \"providerMetadata\": {\"orgId\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"shortName\": \"Linux\", \"dateUpdated\": \"2026-05-11T20:15:16.281Z\"}}}",
"cveMetadata": "{\"cveId\": \"CVE-2024-35995\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2026-05-11T20:15:16.281Z\", \"dateReserved\": \"2024-05-17T13:50:33.148Z\", \"assignerOrgId\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"datePublished\": \"2024-05-20T09:47:59.057Z\", \"assignerShortName\": \"Linux\"}",
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
}
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Loading…
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.
Loading…