LiveActive security incident?Get immediate response
CVE Record

CVE-2024-42230: powerpc/pseries: Fix scv instruction crash with kexec

In the Linux kernel, the following vulnerability has been resolved: powerpc/pseries: Fix scv instruction crash with kexec kexec on pseries disables AIL (reloc_on_exc), required for scv instruction support, before other CPUs have been shut down. This means they can execute scv instructions after AIL is disabled, which causes an interrupt at an unexpected entry location that crashes the kernel. Change the kexec sequence to disable AIL after other CPUs have been brought down. As a refresher, the real-mode scv interrupt vector is 0x17000, and the fixed-location head code probably couldn't easily deal with implementing such high addresses so it was just decided not to support that interrupt at all.

UnknownCVSS not scoredNot KEV-listedUpdated
Discuss exposureBack to CVEs
Glexia's TakeAutomated analysismoderate

Security readout for executives and security teams

Plain-English summary

CVE-2024-42230 is a Linux kernel reliability flaw on powerpc pseries systems. During kexec, the kernel can disable a required interrupt mode before other CPUs stop, allowing those CPUs to execute scv instructions and crash the kernel. The main business risk is unexpected outage during kexec-based reboot or crash-recovery workflows.

Executive priority

Handle through normal kernel patch governance, with higher priority for IBM Power environments where kexec supports availability or recovery processes. No cited source indicates active exploitation, but an unplanned kernel crash can still affect service continuity.

Technical view

On powerpc pseries, kexec disables AIL, also described as reloc_on_exc, before secondary CPUs are brought down. CPUs can still execute scv instructions after AIL is disabled, causing an interrupt at an unexpected entry location and kernel crash. The Linux fix changes the kexec ordering so AIL is disabled after other CPUs are stopped.

Likely exposure

Exposure appears limited to Linux powerpc pseries systems using affected kernel versions and kexec. The CVE data names Linux versions and stable kernel references, but distribution backports can change practical exposure. Non-powerpc and systems not using kexec are not shown as affected in the provided sources.

Exploitation context

The provided sources do not report active exploitation, and KEV status is false. The described trigger is a kexec sequencing condition on powerpc pseries, not a remote attack path. Treat it as an availability risk for affected systems until vendor kernel status is confirmed.

Researcher notes

Evidence supports a powerpc pseries kexec ordering bug involving AIL and scv interrupt handling. Public data lacks CVSS, CWE, exploit status, and detailed distro impact beyond the referenced Debian LTS advisory. Avoid broad Linux exposure claims without kernel configuration and platform confirmation.

Mitigation direction

  • Update affected Linux kernels using vendor or distribution security guidance.
  • Review referenced Linux stable commits for the fixed kexec ordering change.
  • Prioritize systems that rely on kexec for reboot or crash-recovery operations.
  • Check Debian LTS guidance if managing Debian-based affected systems.

Validation and detection

  • Inventory Linux powerpc pseries hosts and current kernel versions.
  • Confirm whether kexec is enabled or operationally used on those hosts.
  • Compare installed kernels with vendor advisories and stable fixed builds.
  • Review maintenance logs for unexplained crashes during kexec or reboot workflows.
Prepared
Confidence
medium
Sources
7

Public sources used

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.

Potential ATT&CK relevance

Conservative CVE-to-ATT&CK context

These mappings and lookup hints may be relevant to the vulnerability behavior, CWE, affected product, or exposure path. Glexia-inferred context is not an official MITRE, ATT&CK, CWE, or CVE Program mapping.

ATT&CK lookup starting points

Use these exact CWE pages and searches to review the Glexia ATT&CK library from this CVE's weakness and description context.

cve · low confidence lookup

CVE-2024-42230 mapping review

Open the CVE-to-ATT&CK bridge for reviewed, inferred, or future official mappings tied to this CVE.

Open ATT&CK lookup
Vulnerability profileCVE Program record
Severity
Unknown
CVSS
Not scored
Known Exploited
No
Published
Official CVE source material

CNA and ADP enrichment extracted from CVE v5

These fields come from the CVE record and ADP containers, not from Glexia's Take. They preserve time-varying source decisions such as CISA SSVC, KEV status, CVSS metrics, and provider references.

0CVSS vectors
3Timeline events
2ADP providers
6Source links

SSVC decision data

CISA-ADPCISA Coordinator
Timestamp
Version
2.0.3
Exploitation: noneAutomatable: noTechnical Impact: partial

Vulnerability timeline

Timeline events are normalized from CVE metadata, CNA source timelines, ADP timelines, and KEV metadata when present.

  1. CVE reservedCVE Program

    The CVE ID was reserved by the assigning CNA.

  2. CVE publishedCVE Program

    The CVE record was published.

  3. CVE updatedCVE Program

    The CVE record metadata indicates this as the latest update time.

ADP provider summaries

CVECVE Program Container
CISA-ADPCISA ADP Vulnrichment
other:ssvc

Source materials

Affected products

Products and packages named in the record

VendorProductVersion / packageStatus
LinuxLinux7fa95f9adaee7e5cbb195d3359741120829e488b, 7fa95f9adaee7e5cbb195d3359741120829e488b, 7fa95f9adaee7e5cbb195d3359741120829e488b, 7fa95f9adaee7e5cbb195d3359741120829e488bunaffected
LinuxLinux5.9, 0, 6.1.98, 6.6.39, 6.9.9, 6.10affected
Weakness

CWE details

No CWE listed

CWE links open Glexia weakness intelligence pages with official CWE context, developer remediation guidance, and related CVE mappings.