CVE-2024-0151

Public on 2024-04-24
Modified on 2024-05-17
Description
Insufficient argument checking in Secure state Entry functions in software using Cortex-M Security Extensions (CMSE), that has been compiled using toolchains that implement 'Arm v8-M Security Extensions Requirements on Development Tools' prior to version 1.4, allows an attacker to pass values to Secure state that are out of range for types smaller than 32-bits. Out of range values might lead to incorrect operations in secure state.
Severity
Important severity
Important
CVSS v3 Base Score
7.9
See breakdown

Affected Packages

Platform Package Release Date Advisory Status
HAQM Linux 1 kernel Not Affected
HAQM Linux 2 - Core kernel Not Affected
HAQM Linux 2 - Kernel-5.10 Extra kernel Not Affected
HAQM Linux 2 - Kernel-5.15 Extra kernel Not Affected
HAQM Linux 2 - Kernel-5.4 Extra kernel Not Affected
HAQM Linux 2023 kernel Not Affected

CVSS Scores

Score Type Score Vector
HAQM Linux CVSSv3 7.9 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:H
NVD CVSSv3 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N