PT-2024-11459 · Linux+2 · Linux Kernel+2
Michael Ellerman
·
Published
2021-10-16
·
Updated
2024-11-07
·
CVE-2021-47465
CVSS v3.1
7.1
High
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
The issue is related to the KVM: PPC: Book3S HV: Fix stack handling in idle kvm start guest() function. The problem arises because there is no caller frame on the emergency stack, and the function stores CR/LR into its caller's frame, which can lead to corruption of memory outside the allocation for the emergency stack. The function creates a stack frame and saves non-volatile registers, but the frame is not large enough to fit the non-volatiles, resulting in writing outside the emergency stack allocation. This can corrupt memory at 0-24 bytes and 112-248 bytes above the emergency stack allocation. However, this has gone unnoticed in practice because the memory immediately above the emergency stack is used for other stack allocations.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Uncontrolled Recursion
Stack Overflow
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Astra Linux
Linux Kernel
Suse