CVE-2024-26847: 
Linux Kernel vulnerability analysis and mitigation

CVE-2024-26847 addresses a vulnerability in the Linux kernel's powerpc/rtas component, discovered in February 2024. The issue stems from a spelling discrepancy in the RTAS function table where 'ibm,reset-pe-dma-windows' was incorrectly used instead of 'ibm,reset-pe-dma-window'. This mismatch affects PowerPC systems, particularly those running IBM POWER10 hardware (Kernel Git).

The vulnerability occurs due to a naming mismatch between the PAPR specification and actual firmware implementation. While the PAPR spec v2.13 7.3.31.4.1 specifies the function name as 'ibm,reset-pe-dma-windows' (plural), firmware implementations use the singular form 'ibm,reset-pe-dma-window' in the device tree. This discrepancy causes reverse lookups (token -> name) to fail, generating unexpected lookup failures for token 86. The issue manifests during system operations involving DMA window management, particularly affecting PCI device initialization (Kernel Git).

The vulnerability can lead to system warnings and potential kernel oopses when lockdep is enabled or RTAS tracepoints are active, as these paths attempt to dereference the result of the failed lookup. This primarily affects PowerPC systems, particularly those running IBM POWER10 hardware during device initialization sequences (Kernel Git).

The vulnerability has been assigned a CVSS v3.1 Base Score of 5.1 (Medium) with vector AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H, indicating local access is required and the primary impact is to system availability (NVD).

The issue has been resolved through a patch that corrects the function name in the RTAS function table to match the firmware's behavior. The fix involves updating the constants and function names to use the singular form 'ibm,reset-pe-dma-window' consistently throughout the codebase (Kernel Git).