PT-2024-11348 · Linux+2 · Linux Kernel+2
Christophe Leroy
·
Published
2021-07-05
·
Updated
2024-11-04
·
CVE-2021-47350
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
The powerpc kernel is not prepared to handle exec faults from kernel. The function
is exec fault() returns 'false' when an exec fault is taken by kernel, because the check is based on reading current->thread.regs->trap which contains the trap from user. This leads to a forever minor exec fault because PAGE EXEC is not set and set access flags filter() bails out without setting the PAGE EXEC flag. The issue arises from commit d3ca587404b3 which removed the proper handling of exec faults, introducing a test based on error code.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Improper Locking
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Astra Linux
Linux Kernel
Suse