PT-2024-11365 · Linux+2 · Linux Kernel+2
Claudiu Manoil
·
Published
2021-09-19
·
Updated
2024-07-10
·
CVE-2021-47368
CVSS v2.0
8.5
High
| Vector | AV:N/AC:L/Au:S/C:C/I:N/A:C |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
The issue is related to the
irq set affinity hit() function, which stores a reference to the cpumask t parameter in the irq descriptor. This reference can be accessed later from irq affinity hint proc show(). However, the cpu mask parameter passed to irq set affinity hit() has only temporary storage, making later accesses to it illegal. This can result in paging request oops when reading from the corresponding procfs affinity hint file. The issue is fixed by the get cpu mask() helper, which provides permanent storage for the cpumask t parameter.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Resource Exhaustion
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Astra Linux
Linux Kernel
Suse