CVE-2024-26842

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

scsi: ufs: core: Fix shift issue in ufshcd_clear_cmd()

When task_tag >= 32 (in MCQ mode) and sizeof(unsigned int) == 4, 1U <<

task_tag will out of bounds for a u32 mask. Fix this up to prevent

SHIFT_ISSUE (bitwise shifts that are out of bounds for their data type).

[name:debug_monitors&]Unexpected kernel BRK exception at EL1

[name:traps&]Internal error: BRK handler: 00000000f2005514 [#1] PREEMPT SMP

[name:mediatek_cpufreq_hw&]cpufreq stop DVFS log done

[name:mrdump&]Kernel Offset: 0x1ba5800000 from 0xffffffc008000000

[name:mrdump&]PHYS_OFFSET: 0x80000000

[name:mrdump&]pstate: 22400005 (nzCv daif +PAN -UAO)

[name:mrdump&]pc : [0xffffffdbaf52bb2c] ufshcd_clear_cmd+0x280/0x288

[name:mrdump&]lr : [0xffffffdbaf52a774] ufshcd_wait_for_dev_cmd+0x3e4/0x82c

[name:mrdump&]sp : ffffffc0081471b0

<snip>

Workqueue: ufs_eh_wq_0 ufshcd_err_handler

Call trace:

dump_backtrace+0xf8/0x144

show_stack+0x18/0x24

dump_stack_lvl+0x78/0x9

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References