CVE-2024-11263 — arch: riscv: userspace: potential security risk when CONFIG_RISCV_GP=y

CVE-2024-11263

arch: riscv: userspace: potential security risk when CONFIG_RISCV_GP=y PUBLISHED

Description (CNA)

When the Global Pointer (GP) relative addressing is enabled (CONFIG_RISCV_GP=y), the gp reg points at 0x800 bytes past the start of the .sdata section which is then used by the linker to relax accesses to global symbols.

Affected (CNA)

Vendor / product	Versions
zephyrproject-rtos / Zephyr	affected * through 3.7

CWE

CWE-270

References

https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-jjf3-7x72-pqm9

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.