PT-2024-11348

CVE-2021-47350

·

تاريخ النشر

2021-07-05

·

تاريخ التحديث

2024-11-04

الوصف من

CVSS 3.1
7.8
عالية
المقاييسAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description The powerpc kernel is not prepared to handle exec faults from kernel. The function is exec fault() returns 'false' when an exec fault is taken by kernel, because the check is based on reading current->thread.regs->trap which contains the trap from user. This leads to a forever minor exec fault because PAGE EXEC is not set and set access flags filter() bails out without setting the PAGE EXEC flag. The issue arises from commit d3ca587404b3 which removed the proper handling of exec faults, introducing a test based on error code.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
التأثيرات
الباحثون
المورّدون
المنتجات المتأثرة
المعرّفات ذات الصلة
OESA-2024-1692
OPENSUSE-SU-2024_2185-1
SUSE-SU-2024:2010-1
SUSE-SU-2024:2183-1
SUSE-SU-2024:2185-1
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾