CVE-2024-35871

A vulnerability was found in the Linux kernel affecting the RISC-V architecture, where the kernel global pointer (gp) can be leaked to user space. This issue occurs when a user-mode helper thread, such as /sbin/init) starts a new process via execve without clearing the kernel registers, allowing sensitive kernel memory values, like the gp, to be exposed. The vulnerability can be exploited via debugging interfaces such as ptrace or by accessing /proc/*/task/*/syscall.

Red Hat Enterprise Linux is not vulnerable to this CVE, as it does not affect the versions or configurations of the Linux kernel used in its distributions.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.