CVE-2024-56781
"Powermac PowerPC #size-cells Property Missing Vulnerability"
Description
In the Linux kernel, the following vulnerability has been resolved: powerpc/prom_init: Fixup missing powermac #size-cells On some powermacs `escc` nodes are missing `#size-cells` properties, which is deprecated and now triggers a warning at boot since commit 045b14ca5c36 ("of: WARN on deprecated #address-cells/#size-cells handling"). For example: Missing '#size-cells' in /pci@f2000000/mac-io@c/escc@13000 WARNING: CPU: 0 PID: 0 at drivers/of/base.c:133 of_bus_n_size_cells+0x98/0x108 Hardware name: PowerMac3,1 7400 0xc0209 PowerMac ... Call Trace: of_bus_n_size_cells+0x98/0x108 (unreliable) of_bus_default_count_cells+0x40/0x60 __of_get_address+0xc8/0x21c __of_address_to_resource+0x5c/0x228 pmz_init_port+0x5c/0x2ec pmz_probe.isra.0+0x144/0x1e4 pmz_console_init+0x10/0x48 console_init+0xcc/0x138 start_kernel+0x5c4/0x694 As powermacs boot via prom_init it's possible to add the missing properties to the device tree during boot, avoiding the warning. Note that `escc-legacy` nodes are also missing `#size-cells` properties, but they are skipped by the macio driver, so leave them alone. Depends-on: 045b14ca5c36 ("of: WARN on deprecated #address-cells/#size-cells handling")
INFO
Published Date :
Jan. 8, 2025, 6:15 p.m.
Last Modified :
Jan. 9, 2025, 9:21 p.m.
Source :
416baaa9-dc9f-4396-8d5f-8c081fb06d67
Remotely Exploitable :
No
Impact Score :
3.6
Exploitability Score :
1.8
References to Advisories, Solutions, and Tools
Here, you will find a curated list of external links that provide in-depth
information, practical solutions, and valuable tools related to
CVE-2024-56781.
We scan GitHub repositories to detect new proof-of-concept exploits. Following list is a collection of public exploits and proof-of-concepts, which have been published on GitHub (sorted by the most recently updated).
Results are limited to the first 15 repositories due to potential performance issues.
The following list is the news that have been mention
CVE-2024-56781 vulnerability anywhere in the article.
The following table lists the changes that have been made to the
CVE-2024-56781 vulnerability over time.
Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability's severity, exploitability, or other characteristics.
-
Initial Analysis by [email protected]
Jan. 09, 2025
Action Type Old Value New Value Added CVSS V3.1 NIST AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H Added CWE NIST NVD-CWE-noinfo Added CPE Configuration OR *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions up to (excluding) 5.4.287 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 5.5 up to (excluding) 5.10.231 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 5.11 up to (excluding) 5.15.174 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 5.16 up to (excluding) 6.1.120 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 6.2 up to (excluding) 6.6.66 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 6.7 up to (excluding) 6.12.5 Changed Reference Type https://git.kernel.org/stable/c/0b94d838018fb0a824e0cd3149034928c99fb1b7 No Types Assigned https://git.kernel.org/stable/c/0b94d838018fb0a824e0cd3149034928c99fb1b7 Patch Changed Reference Type https://git.kernel.org/stable/c/296a109fa77110ba5267fe0e90a26005eecc2726 No Types Assigned https://git.kernel.org/stable/c/296a109fa77110ba5267fe0e90a26005eecc2726 Patch Changed Reference Type https://git.kernel.org/stable/c/691284c2cd33ffaa0b35ce53b3286b90621e9dc9 No Types Assigned https://git.kernel.org/stable/c/691284c2cd33ffaa0b35ce53b3286b90621e9dc9 Patch Changed Reference Type https://git.kernel.org/stable/c/6d5f0453a2228607333bff0c85238a3cb495d194 No Types Assigned https://git.kernel.org/stable/c/6d5f0453a2228607333bff0c85238a3cb495d194 Patch Changed Reference Type https://git.kernel.org/stable/c/a79a7e3c03ae2a07f68b5f24d5ed549f9799ec89 No Types Assigned https://git.kernel.org/stable/c/a79a7e3c03ae2a07f68b5f24d5ed549f9799ec89 Patch Changed Reference Type https://git.kernel.org/stable/c/cf89c9434af122f28a3552e6f9cc5158c33ce50a No Types Assigned https://git.kernel.org/stable/c/cf89c9434af122f28a3552e6f9cc5158c33ce50a Patch Changed Reference Type https://git.kernel.org/stable/c/ee68554d2c03e32077f7b984e5289fdb005036d2 No Types Assigned https://git.kernel.org/stable/c/ee68554d2c03e32077f7b984e5289fdb005036d2 Patch -
New CVE Received by 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Jan. 08, 2025
Action Type Old Value New Value Added Description In the Linux kernel, the following vulnerability has been resolved: powerpc/prom_init: Fixup missing powermac #size-cells On some powermacs `escc` nodes are missing `#size-cells` properties, which is deprecated and now triggers a warning at boot since commit 045b14ca5c36 ("of: WARN on deprecated #address-cells/#size-cells handling"). For example: Missing '#size-cells' in /pci@f2000000/mac-io@c/escc@13000 WARNING: CPU: 0 PID: 0 at drivers/of/base.c:133 of_bus_n_size_cells+0x98/0x108 Hardware name: PowerMac3,1 7400 0xc0209 PowerMac ... Call Trace: of_bus_n_size_cells+0x98/0x108 (unreliable) of_bus_default_count_cells+0x40/0x60 __of_get_address+0xc8/0x21c __of_address_to_resource+0x5c/0x228 pmz_init_port+0x5c/0x2ec pmz_probe.isra.0+0x144/0x1e4 pmz_console_init+0x10/0x48 console_init+0xcc/0x138 start_kernel+0x5c4/0x694 As powermacs boot via prom_init it's possible to add the missing properties to the device tree during boot, avoiding the warning. Note that `escc-legacy` nodes are also missing `#size-cells` properties, but they are skipped by the macio driver, so leave them alone. Depends-on: 045b14ca5c36 ("of: WARN on deprecated #address-cells/#size-cells handling") Added Reference https://git.kernel.org/stable/c/0b94d838018fb0a824e0cd3149034928c99fb1b7 Added Reference https://git.kernel.org/stable/c/296a109fa77110ba5267fe0e90a26005eecc2726 Added Reference https://git.kernel.org/stable/c/691284c2cd33ffaa0b35ce53b3286b90621e9dc9 Added Reference https://git.kernel.org/stable/c/6d5f0453a2228607333bff0c85238a3cb495d194 Added Reference https://git.kernel.org/stable/c/a79a7e3c03ae2a07f68b5f24d5ed549f9799ec89 Added Reference https://git.kernel.org/stable/c/cf89c9434af122f28a3552e6f9cc5158c33ce50a Added Reference https://git.kernel.org/stable/c/ee68554d2c03e32077f7b984e5289fdb005036d2
CWE - Common Weakness Enumeration
While CVE identifies
specific instances of vulnerabilities, CWE categorizes the common flaws or
weaknesses that can lead to vulnerabilities. CVE-2024-56781 is
associated with the following CWEs:
Common Attack Pattern Enumeration and Classification (CAPEC)
Common Attack Pattern Enumeration and Classification
(CAPEC)
stores attack patterns, which are descriptions of the common attributes and
approaches employed by adversaries to exploit the CVE-2024-56781
weaknesses.