Vulnerability in Kernel: arm64: compat: Do not treat syscall number as ESR_ELx for a bad syscall
Summary
GSD-2022-1003613: arm64: compat: Do not treat syscall number as ESR_ELx for a bad syscall. Affects Kernel versions < ad97425d23af3c3b8d4f6a2bb666cb485087c007. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Kernel is a critical component of the Linux operating system that provides core functionalities and acts as an interface between hardware and software. It manages system resources, facilitates communication between processes, and ensures the security and stability of the system. The arm64 architecture is specifically designed for 64-bit ARM processors. The vulnerability in question affects the compatibility layer of the arm64 architecture, which handles system calls from 32-bit applications running on 64-bit systems.
Vulnerability Detail
The vulnerability arises from the incorrect treatment of the syscall number as ESR_ELx (Exception Syndrome Register) for a bad syscall in the arm64 compatibility layer. This could lead to various security issues, including privilege escalation, denial of service, or information disclosure. By exploiting this vulnerability, an attacker may be able to execute arbitrary code or gain elevated privileges on the affected system. It is important to note that the impact and attack plausibility of this vulnerability have not been proven yet.
How To Fix
No fixed version is published for this vulnerability.
The vulnerability has been addressed in the Linux Kernel version v5.10.121 through the commit ad97425d23af3c3b8d4f6a2bb666cb485087c007. To fix the vulnerability, it is recommended to update the Kernel to this version or a later one. This can be done by downloading the updated Kernel source code from the official Git repository (https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/) and following the installation instructions provided by the Linux distribution or system administrator.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
No specific workaround has been mentioned for this vulnerability.
Conclusion
The vulnerability in the Kernel's arm64 compatibility layer can potentially lead to security issues and compromise the affected system. It is crucial to update the Kernel to version v5.10.121 or a later one to mitigate this vulnerability. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The impact of this vulnerability could include privilege escalation, denial of service, or information disclosure. However, the actual impact and attack plausibility have not yet been proven.
Systems running the Linux Kernel with the arm64 architecture and the affected versions are vulnerable to this issue.
Yes, the vulnerability has been fixed in Linux Kernel version v5.10.121.
To fix the vulnerability, update the Kernel to version v5.10.121 or a later one. Download the updated Kernel source code from the official Git repository and follow the installation instructions provided by the Linux distribution or system administrator.
No specific workaround has been mentioned for this vulnerability.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
Follow Vulert in Google
Get more Vulert vulnerability and dependency-security updates in Google Search and AI results.