Vulnerability in powerpc/memhotplug Package: Add add_pages Override for PPC
Summary
GSD-2022-1004227: powerpc/memhotplug: Add add_pages override for PPC. Affects Kernel versions >= ffa0b64e3be58519ae472ea29a1a1ad681e32f48, < 84d146fd35a01b08e9515041de60f0f915a417d5. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The powerpc/memhotplug package is a component of the Linux Kernel, specifically designed for PowerPC architecture. It provides functionality related to memory hotplug, allowing for dynamic addition or removal of memory resources from a running system. This package is widely used in PowerPC-based systems and is an integral part of the Linux operating system.
Vulnerability Detail
The vulnerability identified in the powerpc/memhotplug package involves the lack of an add_pages override for PPC (PowerPC) architecture. This oversight can potentially lead to security vulnerabilities, although the actual impact and attack plausibility have not been proven yet. The vulnerability was introduced in version v5.18 of the Linux Kernel and was fixed in version v5.18.10 by commit 84d146fd35a01b08e9515041de60f0f915a417d5. For more details, please refer to the references link provided.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Conclusion
The powerpc/memhotplug package in the Linux Kernel has a vulnerability related to the lack of an add_pages override for PPC architecture. To ensure the system's security, it is crucial to update the Kernel to version v5.18.10 or later, which includes the necessary fix commit. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The powerpc/memhotplug package is a component of the Linux Kernel that enables dynamic addition or removal of memory resources from a running system in PowerPC architecture.
The impact of this vulnerability is currently unknown, as the actual attack plausibility has not been proven. However, it is important to apply the fix to ensure the system's security.
To fix this vulnerability, update the Linux Kernel to version v5.18.10 or later, which includes the necessary fix commit (84d146fd35a01b08e9515041de60f0f915a417d5).
No specific workaround has been mentioned for this vulnerability. It is recommended to apply the fix by updating the Linux Kernel.
For more information about this vulnerability, please refer to the references link provided in the vulnerability details.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
