Bug 2270660 (CVE-2024-2607)

Summary: CVE-2024-2607 Mozilla: JIT code failed to save return registers on Armv7-A
Product: [Other] Security Response Reporter: Mauro Matteo Cascella <mcascell>
Component: vulnerabilityAssignee: Product Security <prodsec-ir-bot>
Status: NEW --- QA Contact:
Severity: high Docs Contact:
Priority: high    
Version: unspecifiedCC: abobrov, erack, gotiwari, jhorak, mvyas, tpopela
Target Milestone: ---Keywords: Security
Target Release: ---   
Hardware: All   
OS: Linux   
Whiteboard:
Fixed In Version: firefox 115.9, thunderbird 115.9 Doc Type: ---
Doc Text:
The Mozilla Foundation Security Advisory describes this flaw as: Return registers were overwritten which could have allowed an attacker to execute arbitrary code. *Note:* This issue only affected Armv7-A systems. Other operating systems are unaffected.
Story Points: ---
Clone Of: Environment:
Last Closed: Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On:    
Bug Blocks: 2268120    

Description Mauro Matteo Cascella 2024-03-21 10:37:30 UTC
Return registers were overwritten which could have allowed an attacker to execute arbitrary code. *Note:* This issue only affected Armv7-A systems. Other operating systems are unaffected.

External Reference:
https://www.mozilla.org/en-US/security/advisories/mfsa2024-13/#CVE-2024-2607

Comment 27 errata-xmlrpc 2024-03-25 18:49:39 UTC
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9.2 Extended Update Support

Via RHSA-2024:1483 https://access.redhat.com/errata/RHSA-2024:1483

Comment 28 errata-xmlrpc 2024-03-25 19:25:35 UTC
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9

Via RHSA-2024:1485 https://access.redhat.com/errata/RHSA-2024:1485

Comment 29 errata-xmlrpc 2024-03-25 19:28:35 UTC
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8

Via RHSA-2024:1484 https://access.redhat.com/errata/RHSA-2024:1484

Comment 30 errata-xmlrpc 2024-03-25 19:32:32 UTC
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support
  Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions
  Red Hat Enterprise Linux 8.4 Telecommunications Update Service

Via RHSA-2024:1491 https://access.redhat.com/errata/RHSA-2024:1491

Comment 31 errata-xmlrpc 2024-03-25 19:32:52 UTC
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8.2 Advanced Update Support
  Red Hat Enterprise Linux 8.2 Update Services for SAP Solutions
  Red Hat Enterprise Linux 8.2 Telecommunications Update Service

Via RHSA-2024:1490 https://access.redhat.com/errata/RHSA-2024:1490

Comment 32 errata-xmlrpc 2024-03-25 19:34:36 UTC
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8.8 Extended Update Support

Via RHSA-2024:1488 https://access.redhat.com/errata/RHSA-2024:1488

Comment 33 errata-xmlrpc 2024-03-25 19:34:51 UTC
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9.0 Extended Update Support

Via RHSA-2024:1487 https://access.redhat.com/errata/RHSA-2024:1487

Comment 34 errata-xmlrpc 2024-03-25 19:35:11 UTC
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8.6 Extended Update Support

Via RHSA-2024:1489 https://access.redhat.com/errata/RHSA-2024:1489

Comment 35 errata-xmlrpc 2024-03-25 20:05:00 UTC
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support
  Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions
  Red Hat Enterprise Linux 8.4 Telecommunications Update Service

Via RHSA-2024:1499 https://access.redhat.com/errata/RHSA-2024:1499

Comment 36 errata-xmlrpc 2024-03-25 20:06:25 UTC
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9

Via RHSA-2024:1493 https://access.redhat.com/errata/RHSA-2024:1493

Comment 37 errata-xmlrpc 2024-03-25 20:06:42 UTC
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9.0 Extended Update Support

Via RHSA-2024:1495 https://access.redhat.com/errata/RHSA-2024:1495

Comment 38 errata-xmlrpc 2024-03-25 20:06:52 UTC
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 7

Via RHSA-2024:1498 https://access.redhat.com/errata/RHSA-2024:1498

Comment 39 errata-xmlrpc 2024-03-25 20:07:07 UTC
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8

Via RHSA-2024:1494 https://access.redhat.com/errata/RHSA-2024:1494

Comment 40 errata-xmlrpc 2024-03-25 20:07:23 UTC
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9.2 Extended Update Support

Via RHSA-2024:1492 https://access.redhat.com/errata/RHSA-2024:1492

Comment 41 errata-xmlrpc 2024-03-25 20:10:58 UTC
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 7

Via RHSA-2024:1486 https://access.redhat.com/errata/RHSA-2024:1486

Comment 42 errata-xmlrpc 2024-03-25 20:12:38 UTC
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8.8 Extended Update Support

Via RHSA-2024:1496 https://access.redhat.com/errata/RHSA-2024:1496

Comment 43 errata-xmlrpc 2024-03-25 20:12:51 UTC
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8.6 Extended Update Support

Via RHSA-2024:1497 https://access.redhat.com/errata/RHSA-2024:1497

Comment 44 errata-xmlrpc 2024-03-25 20:13:09 UTC
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8.2 Advanced Update Support
  Red Hat Enterprise Linux 8.2 Update Services for SAP Solutions
  Red Hat Enterprise Linux 8.2 Telecommunications Update Service

Via RHSA-2024:1500 https://access.redhat.com/errata/RHSA-2024:1500