Security features bypass in ARM products - CVE-2024-5660

Vulnerability identifier: #VU103509

CSH Severity: High

CVSS v4 BT: 6 [CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:H/SI:H/SA:H/E:U/U:Amber]

CVE-ID: CVE-2024-5660

CWE-ID: CWE-254

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a malicious guest to compromise the hypervisor.

The vulnerability exists due to incorrect memory address translation when Hardware Page Aggregation (HPA) is enabled and Stage-1 and/or Stage-2 translation is enabled for the active translation regime. A malicious guest can bypass Stage-2 translation and/or GPT protection and compromise the host in certain hypervisor environments.

Cortex-A77
Cortex-A78
Cortex-A78C
Cortex-A78AE
Cortex-A710
Cortex-X1
Cortex-X1C
Cortex-X2
Cortex-X3
Cortex-X4
Cortex-X925
Neoverse V1
Neoverse V2
Neoverse V3
Neoverse V3AE
Neoverse N2
SUSE Linux Enterprise Server 12 SP5
SUSE Linux Enterprise Server 12 SP5 LTSS Extended
SUSE Linux Enterprise High Availability Extension 12
SUSE Linux Enterprise High Performance Computing 12
SUSE Linux Enterprise Server 12
SUSE Linux Enterprise Server for SAP Applications 12
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise Real Time 15
SUSE Linux Enterprise Live Patching
Confidential Computing Module
SUSE Real Time Module
openSUSE Leap
kgraft-patch-4_12_14-122_244-default
kernel-livepatch-6_4_0-150600_10_26-rt-debuginfo
kernel-livepatch-6_4_0-150600_10_26-rt
kernel-livepatch-SLE15-SP6-RT_Update_8-debugsource
cluster-md-kmp-default
kernel-default
kernel-default-devel-debuginfo
kernel-default-man
kernel-source
kernel-devel
kernel-macros
kernel-syms
ocfs2-kmp-default-debuginfo
kernel-default-base
gfs2-kmp-default-debuginfo
gfs2-kmp-default
dlm-kmp-default
dlm-kmp-default-debuginfo
ocfs2-kmp-default
cluster-md-kmp-default-debuginfo
kernel-default-devel
kernel-default-base-debuginfo
kernel-default-kgraft-devel
kernel-default-kgraft
kernel-default-debugsource
kernel-default-debuginfo
kernel-coco_debug-devel-debuginfo
kernel-coco
kernel-coco_debug
kernel-coco-devel
kernel-coco-debugsource
kernel-source-coco
kernel-devel-coco
kernel-coco-vdso-debuginfo
reiserfs-kmp-coco-debuginfo
kernel-coco_debug-devel
kernel-coco-debuginfo
kernel-coco_debug-debuginfo
kernel-coco_debug-debugsource
kernel-syms-coco
reiserfs-kmp-coco
kernel-rt_debug-vdso-debuginfo
kernel-rt-vdso-debuginfo
kernel-rt-optional-debuginfo
kernel-rt-vdso
kselftests-kmp-rt
kernel-rt-extra-debuginfo
kernel-rt_debug-debuginfo
kselftests-kmp-rt-debuginfo
kernel-rt-optional
ocfs2-kmp-rt
kernel-source-rt
kernel-devel-rt
kernel-rt
kernel-rt_debug
reiserfs-kmp-rt
kernel-rt-devel
kernel-rt-extra
gfs2-kmp-rt-debuginfo
dlm-kmp-rt
kernel-rt-debugsource
cluster-md-kmp-rt-debuginfo
kernel-rt_debug-devel
kernel-rt-devel-debuginfo
ocfs2-kmp-rt-debuginfo
kernel-rt_debug-debugsource
reiserfs-kmp-rt-debuginfo
kernel-rt-livepatch-devel
kernel-syms-rt
dlm-kmp-rt-debuginfo
kernel-rt_debug-devel-debuginfo
cluster-md-kmp-rt
kernel-rt_debug-vdso
kernel-rt-debuginfo
gfs2-kmp-rt
Dell Secure Connect Gateway

The vendor recommends disabling page aggregation by setting CPUECTLR_EL1[46] to 1.

kgraft-patch-4_12_14-122_244-default - update to 1-8.5.1
kernel-livepatch-6_4_0-150600_10_26-rt-debuginfo - update to 1-150600.1.3.1
kernel-livepatch-6_4_0-150600_10_26-rt - update to 1-150600.1.3.1
kernel-livepatch-SLE15-SP6-RT_Update_8-debugsource - update to 1-150600.1.3.1
cluster-md-kmp-default - update to 4.12.14-122.244.1
kernel-default - update to 4.12.14-122.244.1
kernel-default-devel-debuginfo - update to 4.12.14-122.244.1
kernel-default-man - update to 4.12.14-122.244.1
kernel-source - update to 4.12.14-122.244.1
kernel-devel - update to 4.12.14-122.244.1
kernel-macros - update to 4.12.14-122.244.1
kernel-syms - update to 4.12.14-122.244.1
ocfs2-kmp-default-debuginfo - update to 4.12.14-122.244.1
kernel-default-base - update to 4.12.14-122.244.1
gfs2-kmp-default-debuginfo - update to 4.12.14-122.244.1
gfs2-kmp-default - update to 4.12.14-122.244.1
dlm-kmp-default - update to 4.12.14-122.244.1
dlm-kmp-default-debuginfo - update to 4.12.14-122.244.1
ocfs2-kmp-default - update to 4.12.14-122.244.1
cluster-md-kmp-default-debuginfo - update to 4.12.14-122.244.1
kernel-default-devel - update to 4.12.14-122.244.1
kernel-default-base-debuginfo - update to 4.12.14-122.244.1
kernel-default-kgraft-devel - update to 4.12.14-122.244.1
kernel-default-kgraft - update to 4.12.14-122.244.1
kernel-default-debugsource - update to 4.12.14-122.244.1
kernel-default-debuginfo - update to 4.12.14-122.244.1
Dell Secure Connect Gateway - update to 5.28.00.14
kernel-coco_debug-devel-debuginfo - update to 6.4.0-15061.12.coco15sp6.1
kernel-coco - update to 6.4.0-15061.12.coco15sp6.1
kernel-coco_debug - update to 6.4.0-15061.12.coco15sp6.1
kernel-coco-devel - update to 6.4.0-15061.12.coco15sp6.1
kernel-coco-debugsource - update to 6.4.0-15061.12.coco15sp6.1
kernel-source-coco - update to 6.4.0-15061.12.coco15sp6.1
kernel-devel-coco - update to 6.4.0-15061.12.coco15sp6.1
kernel-coco-vdso-debuginfo - update to 6.4.0-15061.12.coco15sp6.1
reiserfs-kmp-coco-debuginfo - update to 6.4.0-15061.12.coco15sp6.1
kernel-coco_debug-devel - update to 6.4.0-15061.12.coco15sp6.1
kernel-coco-debuginfo - update to 6.4.0-15061.12.coco15sp6.1
kernel-coco_debug-debuginfo - update to 6.4.0-15061.12.coco15sp6.1
kernel-coco_debug-debugsource - update to 6.4.0-15061.12.coco15sp6.1
kernel-syms-coco - update to 6.4.0-15061.12.coco15sp6.1
reiserfs-kmp-coco - update to 6.4.0-15061.12.coco15sp6.1
kernel-rt_debug-vdso-debuginfo - update to 6.4.0-150600.10.26.1
kernel-rt-vdso-debuginfo - update to 6.4.0-150600.10.26.1
kernel-rt-optional-debuginfo - update to 6.4.0-150600.10.26.1
kernel-rt-vdso - update to 6.4.0-150600.10.26.1
kselftests-kmp-rt - update to 6.4.0-150600.10.26.1
kernel-rt-extra-debuginfo - update to 6.4.0-150600.10.26.1
kernel-rt_debug-debuginfo - update to 6.4.0-150600.10.26.1
kselftests-kmp-rt-debuginfo - update to 6.4.0-150600.10.26.1
kernel-rt-optional - update to 6.4.0-150600.10.26.1
ocfs2-kmp-rt - update to 6.4.0-150600.10.26.1
kernel-source-rt - update to 6.4.0-150600.10.26.1
kernel-devel-rt - update to 6.4.0-150600.10.26.1
kernel-rt - update to 6.4.0-150600.10.26.1
kernel-rt_debug - update to 6.4.0-150600.10.26.1
reiserfs-kmp-rt - update to 6.4.0-150600.10.26.1
kernel-rt-devel - update to 6.4.0-150600.10.26.1
kernel-rt-extra - update to 6.4.0-150600.10.26.1
gfs2-kmp-rt-debuginfo - update to 6.4.0-150600.10.26.1
dlm-kmp-rt - update to 6.4.0-150600.10.26.1
kernel-rt-debugsource - update to 6.4.0-150600.10.26.1
cluster-md-kmp-rt-debuginfo - update to 6.4.0-150600.10.26.1
kernel-rt_debug-devel - update to 6.4.0-150600.10.26.1
kernel-rt-devel-debuginfo - update to 6.4.0-150600.10.26.1
ocfs2-kmp-rt-debuginfo - update to 6.4.0-150600.10.26.1
kernel-rt_debug-debugsource - update to 6.4.0-150600.10.26.1
reiserfs-kmp-rt-debuginfo - update to 6.4.0-150600.10.26.1
kernel-rt-livepatch-devel - update to 6.4.0-150600.10.26.1
kernel-syms-rt - update to 6.4.0-150600.10.26.1
dlm-kmp-rt-debuginfo - update to 6.4.0-150600.10.26.1
kernel-rt_debug-devel-debuginfo - update to 6.4.0-150600.10.26.1
cluster-md-kmp-rt - update to 6.4.0-150600.10.26.1
kernel-rt_debug-vdso - update to 6.4.0-150600.10.26.1
kernel-rt-debuginfo - update to 6.4.0-150600.10.26.1
gfs2-kmp-rt - update to 6.4.0-150600.10.26.1

• https://developer.arm.com/Arm%20Security%20Center/Arm%20CPU%20Vulnerability%20CVE-2024-5660

• Security restrictions bypass in Arm-based CPUs
• SUSE update for the Linux Kernel
• SUSE update for the Linux Kernel
• SUSE update for the Linux Kernel
• Multiple vulnerabilities in Dell Secure Connect Gateway