CVE-2024-46792

In the Linux kernel, the following vulnerability has been resolved:

riscv: misaligned: Restrict user access to kernel memory

raw_copy_{to,from}_user() do not call access_ok(), so this code allowed userspace to access any virtual memory address.

A Low impact flaw was found in the Linux kernel's RISC-V misaligned memory access emulation (arch/riscv/kernel/traps_misaligned.c). The raw_copy_to_user() and raw_copy_from_user() calls used in the misaligned access handling do not call access_ok(), so a local user on a RISC-V system could direct the kernel to access arbitrary virtual memory addresses, including kernel memory, on the user's behalf. Red Hat Product Security scored this issue with CVSS:3.1 5.5 (AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H), reflecting local, low-privilege availability impact, which differs from the CVE.org record score of 7.8 (Important) that assumes high confidentiality and integrity impact. The vulnerable code is specific to the RISC-V architecture, which Red Hat Enterprise Linux does not ship; accordingly, all Red Hat Enterprise Linux kernel and kernel-rt streams, as well as the Hosted OpenShift clusters, are not affected. Only the community Fedora kernel is affected, and a fix is being pursued through the Fedora kernel package updates.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.