Fix crashes when toggling entry flush barrier in powerpc/64s
Summary
GSD-2021-1000322: powerpc/64s: Fix crashes when toggling entry flush barrier. Affects Kernel versions >= f79643787e0a0762d2409b7b8334e83f22d85695, < d2e3590ca39ccfd8a5a46d8c7f095cb6c7b9ae92. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The vulnerability affects the Kernel package in the Linux ecosystem. The Kernel is the core component of the operating system that manages system resources and provides an interface for user applications. The powerpc/64s module within the Kernel is responsible for handling specific operations on PowerPC 64-bit systems. This vulnerability can lead to crashes when toggling the entry flush barrier.
Vulnerability Detail
The vulnerability arises from a flaw in the powerpc/64s module of the Kernel. When attempting to toggle the entry flush barrier, the system crashes due to an error. The impact of this vulnerability is the potential for denial of service (DoS) attacks or system instability. The vulnerability was introduced in version v5.10 of the Linux Kernel by commit f79643787e0a0762d2409b7b8334e83f22d85695. It has been fixed in version v5.10.38 by commit d2e3590ca39ccfd8a5a46d8c7f095cb6c7b9ae92.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability.
Conclusion
In conclusion, the powerpc/64s module in the Kernel package is vulnerable to crashes when toggling the entry flush barrier. This can lead to system instability or denial of service (DoS) attacks. It is recommended to update the Kernel package to version v5.10.38 or later to fix this vulnerability. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The vulnerability can lead to crashes, denial of service (DoS) attacks, or system instability.
You can use the Vulert Playground (https://vulert.com/scanner) to check if your system is affected by this vulnerability. Simply upload your package-lock.json file and it will provide real-time alerts for open-source vulnerabilities.
At the time of this report, there is no known exploit for this vulnerability.
The recommended mitigation is to update the Kernel package to the fixed version.
You can find more information about this vulnerability in the GSD-2021-1000322.json file available in the GSD database repository (https://github.com/cloudsecurityalliance/gsd-database).
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
