Logo
vulnerabilityCVE-2024-0151
Name
CVE-2024-0151
Source
NVD ( link)Debian ( link)
Description
Insufficient argument checking in Secure state Entry functions in software using Cortex-M Security Extensions (CMSE), that has been compiled using toolchains that implement 'Arm v8-M Security Extensions Requirements on Development Tools' prior to version 1.4, allows an attacker to pass values to Secure state that are out of range for types smaller than 32-bits. Out of range values might lead to incorrect operations in secure state.
Published Date
Updated Date
Workaround
-
Advisories

Analysis#


Affected Component
Analysis
llvm
Patched
rust-llvm
Patched

Vulnerability Ratings#


6.5
CVSSv31
NaN
other

Others affected components#


Name
Project
Project Version
Version
Status
buildroot
2025.02.x
15.0.7
Not Affected
buildroot
master
22.1.8
Not Affected
openwrt
master
22.1.5
Not Affected
openwrt
openwrt-25.12
21.1.3
Not Affected
yocto
kirkstone
13.0.1
Patched
yocto
kirkstone
1.59.0
Not Affected
yocto
master
22.1.8
Not Affected

Resolved with patches#


llvm (yocto:kirkstone)

#
Title
Author
Resolve
1
Patch #1
Deepesh Varatharajan <Deepesh.Varatharajan@windriver.com>
CVE-2024-0151

llvm (yocto:scarthgap)

#
Title
Author
Resolve
1
Patch #1
Deepthi Hemraj <Deepthi.Hemraj@windriver.com>
CVE-2024-0151

rust-llvm (yocto:scarthgap)

#
Title
Author
Resolve
1
Patch #1
Deepthi Hemraj <Deepthi.Hemraj@windriver.com>
CVE-2024-0151