https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 29 Sep 2026 18:57:18 +0000 https://vulnerability.circl.lu/vuln/cve-2024-46774 <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()</p> <p>Smatch warns:</p> <p>arch/powerpc/kernel/rtas.c:1932 __do_sys_rtas() warn: potential spectre issue &#39;args.args&#39; [r] (local cap)</p> <p>The &#39;nargs&#39; and &#39;nret&#39; locals come directly from a user-supplied buffer and are used as indexes into a small stack-based array and as inputs to copy_to_user() after they are subject to bounds checks.</p> <p>Use array_index_nospec() after the bounds checks to clamp these values for speculative execution.</p> <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()</p> <p>Smatch warns:</p> <p>arch/powerpc/kernel/rtas.c:1932 __do_sys_rtas() warn: potential spectre issue &#39;args.args&#39; [r] (local cap)</p> <p>The &#39;nargs&#39; and &#39;nret&#39; locals come directly from a user-supplied buffer and are used as indexes into a small stack-based array and as inputs to copy_to_user() after they are subject to bounds checks.</p> <p>Use array_index_nospec() after the bounds checks to clamp these values for speculative execution.</p> https://vulnerability.circl.lu/vuln/cve-2024-46774