Fix crash in perf_instruction_pointer() when ppmu is not set in powerpc/perf
Summary
GSD-2021-1001084: powerpc/perf: Fix crash in perf_instruction_pointer() when ppmu is not set. Affects Kernel versions >= 2ca13a4cc56c920a6c9fc8ee45d02bccacd7f46c, < 74c3c34a04bc226f77b9e515aa067072cff44e52. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The powerpc/perf package is a component of the Linux Kernel that provides performance monitoring capabilities for PowerPC-based systems. It includes functionality for collecting and analyzing performance data, such as instruction pointers and event counts. However, a vulnerability has been discovered in the package that can lead to a crash in the perf_instruction_pointer() function when the ppmu (Performance Monitor Unit) is not set.
Vulnerability Detail
The vulnerability arises from a flaw in the perf_instruction_pointer() function, which is responsible for retrieving the instruction pointer value during performance monitoring. When the ppmu is not set, the function crashes due to a null pointer dereference. This vulnerability can be exploited by an attacker to cause a denial-of-service condition or potentially execute arbitrary code in the context of the affected system.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a workaround, users can disable the use of the powerpc/perf package or avoid scenarios where the ppmu is not set. However, this may limit the functionality of performance monitoring on PowerPC-based systems.
Conclusion
In conclusion, the powerpc/perf package in the Linux Kernel is vulnerable to a crash in the perf_instruction_pointer() function when the ppmu is not set. This vulnerability can be mitigated by updating to Linux Kernel version v5.12.13 or later. Users can also consider workarounds such as disabling the package or avoiding scenarios where the ppmu is not set. For further support and assistance in vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
powerpc/perf is a component of the Linux Kernel that provides performance monitoring capabilities for PowerPC-based systems. It allows users to collect and analyze performance data, such as instruction pointers and event counts.
The vulnerability can lead to a crash in the perf_instruction_pointer() function, potentially causing a denial-of-service condition. In some cases, it may also allow an attacker to execute arbitrary code in the context of the affected system.
To fix this vulnerability, it is recommended to update the Linux Kernel to version v5.12.13 or later. This update includes a patch that addresses the null pointer dereference issue in the perf_instruction_pointer() function.
As a workaround, users can disable the use of the powerpc/perf package or avoid scenarios where the ppmu is not set. However, this may limit the functionality of performance monitoring on PowerPC-based systems.
Users can obtain the updated Linux Kernel from the official Linux Kernel repository. The recommended version is v5.12.13 or later.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
