irqchip/armada-370-xp: Do not touch Performance Counter Overflow on A375, A38x, A39x
Summary
GSD-2022-1003734: irqchip/armada-370-xp: Do not touch Performance Counter Overflow on A375, A38x, A39x. Affects Kernel versions >= 28da06dfd9e4b04577c517f9c4b52aaa73e3d1c7, < 36bab24bb81b44eb6d5f2666181ecb11afaf7c01. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The irqchip/armada-370-xp package is a component of the Linux Kernel. It is responsible for managing interrupt handling on Armada 370 XP SoCs. The package provides support for handling performance counter overflow on specific Armada processors, including A375, A38x, and A39x. Performance counters are hardware registers that track various events, such as instructions executed or cache misses, to measure system performance. However, a vulnerability exists in the package that allows unauthorized access to the Performance Counter Overflow register on the affected Armada processors.
Vulnerability Detail
The vulnerability in irqchip/armada-370-xp allows unauthorized access to the Performance Counter Overflow register on A375, A38x, and A39x processors. This can potentially lead to privilege escalation or information disclosure attacks. An attacker could exploit this vulnerability to manipulate the performance counters or obtain sensitive information from the system. The vulnerability was introduced in Linux Kernel version v4.1 and has been fixed in version v5.4.198 by commit 36bab24bb81b44eb6d5f2666181ecb11afaf7c01.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Conclusion
The irqchip/armada-370-xp package in the Linux Kernel is vulnerable to unauthorized access to the Performance Counter Overflow register on A375, A38x, and A39x processors. This vulnerability can be mitigated by updating the Linux Kernel to version v5.4.198 or later. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The irqchip/armada-370-xp package is a component of the Linux Kernel that handles interrupt handling on Armada 370 XP SoCs.
The vulnerability allows unauthorized access to the Performance Counter Overflow register on A375, A38x, and A39x processors, potentially leading to privilege escalation or information disclosure attacks.
To fix this vulnerability, update the Linux Kernel to version v5.4.198 or later by pulling the latest updates from the official Linux Kernel repository and compiling/installing the updated kernel.
No, there is no known workaround available for this vulnerability. Updating the Linux Kernel is the recommended solution.
The vulnerability was introduced in Linux Kernel version v4.1 and has been fixed in version v5.4.198.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
