Critical Vulnerability in Linux Kernel: RTAS MSR Handling on IBM Cell Machines
Summary
CVE-2022-49955: In the Linux kernel, the following vulnerability has been resolved: powerpc/rtas: Fix RTAS MSR[HV] handling for Cell The semi-recent changes to MSR handling when entering RTAS (firmware) cause crashes on IBM Cell machine... Affects linux versions < 6.0.2-1. Fixed in 6.0.2-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is a core component of the Linux operating system, responsible for managing system resources and facilitating communication between hardware and software. It supports a wide range of architectures, including the IBM Cell architecture. This vulnerability specifically affects the handling of the Machine Status Register (MSR) when entering the Runtime Abstraction Services (RTAS) firmware, leading to potential system crashes on IBM Cell machines.
Vulnerability Detail
In the Linux kernel, a vulnerability was identified in the handling of the MSR[HV] bit when entering RTAS. Recent changes to this handling have caused crashes on IBM Cell machines, resulting in kernel instruction fetch errors and system instability. The vulnerability arises from the incorrect copying of the MSR[HV] bit, which can lead to the kernel attempting to execute user pages, indicating a potential exploit attempt. The issue is critical as it affects the stability and security of systems running on the IBM Cell architecture.
How To Fix
Minimum fixed version
6.0.2-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a workaround, users can consider setting the MSR[HV] bit manually using conditional compilation directives, but this is not a recommended long-term solution. It is best to apply the official patch.
Conclusion
The vulnerability in the Linux kernel regarding RTAS MSR handling poses significant risks to IBM Cell machines, leading to potential system crashes. Users are strongly advised to update their kernels to the patched version to ensure system stability and security. Utilizing tools like Vulert can help in monitoring for such vulnerabilities in real-time.
See every vulnerability recorded for linux →
FAQ
The vulnerability can lead to system crashes and instability on IBM Cell machines, potentially allowing for exploit attempts.
You can use the Vulert platform to monitor and alert for open-source vulnerabilities in your software. Visit Vulert Scanner to check if your application is affected.
Yes, a patch is available in version 6.0.2-1 of the Linux kernel. Users should update to this version or later.
If an immediate update is not possible, consider applying the workaround by manually setting the MSR[HV] bit, but be aware that this is not a permanent solution.
Detailed information can be found in the official CVE database and through the Linux kernel mailing lists.
Related vulnerabilities
Recent vulnerabilities recorded for linux.
