Fix HAVE_HARDLOCKUP_DETECTOR_ARCH build configuration in powerpc
Summary
GSD-2021-1000471: powerpc: Fix HAVE_HARDLOCKUP_DETECTOR_ARCH build configuration. Affects Kernel versions >= 2104180a53698df5aec35aed5f840a26ade0551d, < a09398b7e39daec6d10fc3c658459ae09a60599f. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The powerpc package is a part of the Linux Kernel ecosystem. It provides support for the PowerPC architecture. The vulnerability in question affects the build configuration of the powerpc package, specifically the HAVE_HARDLOCKUP_DETECTOR_ARCH setting.
Vulnerability Detail
The vulnerability arises from an incorrect build configuration in the powerpc package. This misconfiguration can potentially lead to security issues related to hard lockups. Hard lockups occur when a processor becomes unresponsive and stops executing instructions. This vulnerability could be exploited by an attacker to cause denial-of-service or other malicious activities. It is important to note that the impact and attack plausibility of this vulnerability have not been proven yet.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability. It is advised to apply the fix by updating the Linux Kernel to the recommended version.
Conclusion
The powerpc package in the Linux Kernel is vulnerable to a misconfiguration in the build configuration, potentially leading to security issues related to hard lockups. It is recommended to update the Linux Kernel to version v4.14.233 or later to mitigate this vulnerability. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The powerpc package provides support for the PowerPC architecture in the Linux Kernel.
A hard lockup occurs when a processor becomes unresponsive and stops executing instructions.
This vulnerability could be exploited by an attacker to cause denial-of-service or other malicious activities.
No, the impact and attack plausibility of this vulnerability have not been proven yet.
To fix this vulnerability, update the Linux Kernel to version v4.14.233 or later.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
