CVE-2024-58084
Published: Mar 6, 2025
Modified: May 11, 2026
Description
In the Linux kernel, the following vulnerability has been resolved: firmware: qcom: scm: Fix missing read barrier in qcom_scm_get_tzmem_pool() Commit 2e4955167ec5 ("firmware: qcom: scm: Fix __scm and waitq completion variable initialization") introduced a write barrier in probe function to store global '__scm' variable. We all known barriers are paired (see memory-barriers.txt: "Note that write barriers should normally be paired with read or address-dependency barriers"), therefore accessing it from concurrent contexts requires read barrier. Previous commit added such barrier in qcom_scm_is_available(), so let's use that directly. Lack of this read barrier can result in fetching stale '__scm' variable value, NULL, and dereferencing it. Note that barrier in qcom_scm_is_available() satisfies here the control dependency.
| Vendor | Product | Versions |
|---|---|---|
Linux | Linux | affected 449d0d84bcd8246b508d07995326d13c54488b8c - < fee921e3c641f64185abee83f9a6e65f0b380682affected 449d0d84bcd8246b508d07995326d13c54488b8c - < e03db7c1255ebabba5e1a447754faeb138de15a2affected 449d0d84bcd8246b508d07995326d13c54488b8c - < b628510397b5cafa1f5d3e848a28affd1c635302 |
Linux | Linux | affected 6.11unaffected 0 - < 6.11unaffected 6.12.14 - <= 6.12.*unaffected 6.13.3 - <= 6.13.*unaffected 6.14 - <= * |
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now