PT-2024-11348
CVE-2021-47350
·
تاريخ النشر
2021-07-05
·
تاريخ التحديث
2024-11-04
الوصف من
CVSS 3.1
7.8
عاليةالمقاييسAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
The powerpc kernel is not prepared to handle exec faults from kernel. The function
is exec fault() returns 'false' when an exec fault is taken by kernel, because the check is based on reading current->thread.regs->trap which contains the trap from user. This leads to a forever minor exec fault because PAGE EXEC is not set and set access flags filter() bails out without setting the PAGE EXEC flag. The issue arises from commit d3ca587404b3 which removed the proper handling of exec faults, introducing a test based on error code.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾