CVE Vulnerabilities

CVE-2024-45556

Improper Access Control for Register Interface

Published: Apr 07, 2025 | Modified: Apr 07, 2025
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu

Cryptographic issue may arise because the access control configuration permits Linux to read key registers in TCSR.

Weakness

The product uses memory-mapped I/O registers that act as an interface to hardware functionality from software, but there is improper access control to those registers.

Extended Description

Software commonly accesses peripherals in a System-on-Chip (SoC) or other device through a memory-mapped register interface. Malicious software could tamper with any security-critical hardware data that is accessible directly or indirectly through the register interface, which could lead to a loss of confidentiality and integrity.

Potential Mitigations

References