PT-2024-11365

CVE-2021-47368

·

Published

2021-09-19

·

Updated

2024-07-10

Description by

CVSS 2.0
8.5
High
MetricsAV:N/AC:L/Au:S/C:C/I:N/A:C
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description The issue is related to the irq set affinity hit() function, which stores a reference to the cpumask t parameter in the irq descriptor. This reference can be accessed later from irq affinity hint proc show(). However, the cpu mask parameter passed to irq set affinity hit() has only temporary storage, making later accesses to it illegal. This can result in paging request oops when reading from the corresponding procfs affinity hint file. The issue is fixed by the get cpu mask() helper, which provides permanent storage for the cpumask t parameter.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploitability
Exploit
Impacts
Researchers
Vendors
Affected products
Related identifiers
OPENSUSE-SU-2024_2189-1
OPENSUSE-SU-2024_2362-1
SUSE-SU-2024:2008-1
SUSE-SU-2024:2011-1
SUSE-SU-2024:2019-1
SUSE-SU-2024:2189-1
SUSE-SU-2024:2190-1
SUSE-SU-2024:2362-1
SUSE-SU-2024:2365-1
SUSE-SU-2024:2384-1
Found an issue in the description? Have something to add? Feel free to write us 👾