CVE-2024-46761

A flaw was found in the Linux kernel's Powernv hotplug driver. This vulnerability allows a local attacker to trigger a system crash by attempting to remove or disable a PCIe device from the system. The issue arises from the driver trying to access a memory location that has already been cleared, leading to a null pointer dereference. This can result in a denial of service, making the system unavailable.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

To mitigate this issue, prevent the pnv_php kernel module from loading. This can be achieved by creating a blacklist entry for the module.

echo "blacklist pnv_php" | sudo tee /etc/modprobe.d/pnv_php.conf
sudo dracut -f
sudo reboot

A system reboot is required for the changes to take effect. This mitigation may impact systems that rely on PCI hotplug functionality on Powernv platforms.