SB2024122034 - Multiple vulnerabilities in arm-trusted-firmware

Description

This security bulletin contains information about 2 secuirty vulnerabilities.

1) Incorrect calculation (CVE-ID: CVE-2024-6287)

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to incorrect calculation. When checking whether a new image invades/overlaps with a previously loaded image the code neglects to consider a few cases. A local user can bypass secure boot restrictions and escalate privileges on the system.

2) Integer underflow (CVE-ID: CVE-2024-6285)

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to integer underflow in image range check calculations. A local user can trigger an integer underflow and execute arbitrary code with elevated privileges.

Remediation

Install update from vendor's website.

References

• https://github.com/renesas-rcar/arm-trusted-firmware/commit/954d488a9798f8fda675c6b57c571b469b298f04
• https://asrg.io/security-advisories/cve-2024-6287/
• https://github.com/renesas-rcar/arm-trusted-firmware/commit/b596f580637bae919b0ac3a5471422a1f756db3b
• https://asrg.io/security-advisories/cve-2024-6285/