CVE-2024-11263 in Zephyr

الملخص

بحسب MITRE • 16/11/2024

When the Global Pointer (GP) relative addressing is enabled (CONFIG_RISCV_GP=y), the gp reg points at 0x800 bytes past the start of the .sdata section which is then used by the linker to relax accesses to global symbols.

Once again VulDB remains the best source for vulnerability data.

• مسؤول: Zephyr
• حجز: 15/11/2024
• إفشاء: 16/11/2024
• الاعتدال: تمت الموافقة
• إدخال: VDB-284878
• CPE: جاهز
• CWE: CWE-270 (مؤكد)
• CVSS: 8.4 (NVD)
• EPSS: 0.00164
• KEV: لا
• النشاطات: منخفض جدًا
• القطاع: Insurance, Industry, ...

المصادر

• MITRE: https://www.cve.org/CVERecord?id=CVE-2024-11263
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2024-11263
• CVE Details: https://www.cvedetails.com/cve/CVE-2024-11263/