CVE-2024-56771

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-56771
In the Linux kernel, the following vulnerability has been resolved: mtd: spinand: winbond: Fix 512GW, 01GW, 01JW and 02JW ECC information These four chips: * W25N512GW * W25N01GW * W25N01JW * W25N02JW all require a single bit of ECC strength and thus feature an on-die Hamming-like ECC engine. There is no point in filling a ->get_status() callback for them because the main ECC status bytes are located in standard places, and retrieving the number of bitflips in case of corrected chunk is both useless and unsupported (if there are bitflips, then there is 1 at most, so no need to query the chip for that). Without this change, a kernel warning triggers every time a bit flips.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/234d5f75c3ae911b52c5e4442b8a87fbbd129836 Patch
https://git.kernel.org/stable/c/fee9b240916df82a8b07aef0fdfe96785417a164 Patch
Configurations

Configuration 1 (hide)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

10 Jan 2025, 17:28

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
References () https://git.kernel.org/stable/c/234d5f75c3ae911b52c5e4442b8a87fbbd129836 - () https://git.kernel.org/stable/c/234d5f75c3ae911b52c5e4442b8a87fbbd129836 - Patch
References () https://git.kernel.org/stable/c/fee9b240916df82a8b07aef0fdfe96785417a164 - () https://git.kernel.org/stable/c/fee9b240916df82a8b07aef0fdfe96785417a164 - Patch
CWE NVD-CWE-noinfo
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: mtd: spinand: winbond: Corrige la información ECC de 512GW, 01GW, 01JW y 02JW Estos cuatro chips: * W25N512GW * W25N01GW * W25N01JW * W25N02JW requieren un solo bit de fuerza ECC y, por lo tanto, cuentan con un motor ECC tipo Hamming en la matriz. No tiene sentido completar una devolución de llamada ->get_status() para ellos porque los bytes de estado ECC principales se encuentran en lugares estándar, y recuperar el número de bitflips en caso de un fragmento corregido es inútil y no tiene soporte (si hay bitflips, entonces hay 1 como máximo, por lo que no es necesario consultar al chip para eso). Sin este cambio, se activa una advertencia del kernel cada vez que se cambia un bit.
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
First Time Linux linux Kernel
Linux

08 Jan 2025, 18:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-01-08 18:15

Updated : 2025-01-10 17:28

NVD link : CVE-2024-56771

Mitre link : CVE-2024-56771

CVE.ORG link : CVE-2024-56771

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
NVD-CWE-noinfo