Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Shreenivaas Devarajan

Researcher fromIntel
#45596of 53,635
5.5Total CVSS
Vulnerabilities · 1
PT-2024-2975
5.5
2024-02-27
Linux · Linux Kernel · CVE-2021-46917
**Name of the Vulnerable Software and Affected Versions** Linux kernel (affected versions not specified) **Description** The issue is related to the idxd component of the Linux kernel, where a pre-release silicon erratum workaround was leaked into upstream code, causing the WQCFG registers not to be cleared during wq reset. This can lead to unauthorized access to protected information. The problem is addressed by using the wq reset command instead of blasting the MMIO region, which also fixes an issue where registers in future devices are clobbered. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.