When using Arm Cortex-M Security Extensions (CMSE), Secure stack contents can be leaked to Non-secure state via floating-point registers when a Secure to Non-secure function call is made that returns a floating-point value and when this is the first use of floating-point since entering Secure state. This allows an attacker to read a limited quantity of Secure stack contents with an impact on confidentiality. This issue is specific to code generated using LLVM-based compilers.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - When using Arm Cortex-M Security Extensions (CMSE), Secure stack contents can be leaked to Non-secure     state via floating-point registers when a Secure to Non-secure function call is made that returns a     floating-point value and when this is the first use of floating-point since entering Secure state. This     allows an attacker to read a limited quantity of Secure stack contents with an impact on confidentiality.
    This issue is specific to code generated using LLVM-based compilers. (CVE-2024-7883)

Note that Nessus relies on the presence of the package as reported by the vendor.

According to the versions of the llvm packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

    When using Arm Cortex-M Security Extensions (CMSE), Secure stack contents can be leaked to Non-secure     state via floating-point registers when a Secure to Non-secure function call is made that returns a     floating-point value and when this is the first use of floating-point since entering Secure state. This     allows an attacker to read a limited quantity of Secure stack contents with an impact on confidentiality.
    This issue is specific to code generated using LLVM-based compilers.(CVE-2024-7883)

Tenable has extracted the preceding description block directly from the EulerOS llvm security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the versions of the llvm packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

    When using Arm Cortex-M Security Extensions (CMSE), Secure stack  contents can be leaked to Non-secure     state via floating-point registers  when a Secure to Non-secure function call is made that returns a     floating-point value and when this is the first use of floating-point  since entering Secure state. This     allows an attacker to read a limited  quantity of Secure stack contents with an impact on confidentiality.
    This issue is specific to code generated using LLVM-based compilers.(CVE-2024-7883)

Tenable has extracted the preceding description block directly from the EulerOS llvm security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
251258	Linux Distros Unpatched Vulnerability : CVE-2024-7883	Nessus	Misc.	low
235404	EulerOS 2.0 SP12 : llvm (EulerOS-SA-2025-1428)	Nessus	Huawei Local Security Checks	low
235394	EulerOS 2.0 SP12 : llvm (EulerOS-SA-2025-1427)	Nessus	Huawei Local Security Checks	low
233625	EulerOS 2.0 SP13 : llvm (EulerOS-SA-2025-1319)	Nessus	Huawei Local Security Checks	low
233612	EulerOS 2.0 SP13 : llvm (EulerOS-SA-2025-1336)	Nessus	Huawei Local Security Checks	low

Detections

Analytics

CVE-2024-7883

low

Tenable Plugins

low

low

low

low

low