Threats tagged 'ghsa-9hw6-9frh-hxrg'

CVE-2024-46689 is a medium-severity vulnerability in the Linux kernel's Qualcomm cmd-db driver. The issue arises because the shared memory region used by cmd-db is mapped as write-back (WB) cacheable memory, which can cause false write detections by the XPU (eXecute Protection Unit). This false detection triggers a secure interrupt leading to an endless loop in Trust Zone. The problem is currently mitigated by Qualcomm Hypervisor's specific memory mappings, but it poses a risk when other hypervisors like Xen or KVM are used. The fix changes the memory mapping from write-back to write-combining (WC), removing dependency on hypervisor-specific mappings.