Fix kernel config grep in powerpc/prom_init
Summary
GSD-2022-1004733: powerpc/prom_init: Fix kernel config grep. Affects Kernel versions >= 26deb04342e343ac58ab05bc7d2345ff0be9b667, < 1ef2e87736a652bf8c1b0b129d96108ff27facf8. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The powerpc/prom_init module is a part of the Linux Kernel, which is an open-source operating system kernel used by various Linux distributions. The powerpc/prom_init module is responsible for initializing the PowerPC platform's firmware interface. It interacts with the firmware during the boot process and sets up the necessary configurations for the kernel to run on PowerPC systems. However, a vulnerability has been discovered in the kernel config grep functionality of the powerpc/prom_init module.
Vulnerability Detail
The vulnerability in the powerpc/prom_init module arises from an issue with the kernel config grep functionality. The specific details of the vulnerability have not been provided in the available information. However, it is mentioned that the vulnerability was introduced in Linux Kernel version v5.2 by commit 26deb04342e343ac58ab05bc7d2345ff0be9b667 and has been fixed in version v5.4.204 by commit 1ef2e87736a652bf8c1b0b129d96108ff27facf8. The impact and attack plausibility of the vulnerability have not been proven yet.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
No specific workaround has been mentioned for this vulnerability. It is advised to follow the recommended fix by updating the Linux Kernel.
Conclusion
In conclusion, the powerpc/prom_init module in the Linux Kernel has a vulnerability related to the kernel config grep functionality. To mitigate this vulnerability, it is recommended to update the Linux Kernel to version v5.4.204 or later. For further support on vulnerability remediation, you can reach out to DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The powerpc/prom_init module is a part of the Linux Kernel and is responsible for initializing the PowerPC platform's firmware interface.
The impact of this vulnerability is not specified in the available information. Further analysis is required to determine the potential ramifications.
To fix this vulnerability, it is recommended to update the Linux Kernel to version v5.4.204 or later.
No specific workarounds have been mentioned for this vulnerability. It is advised to follow the recommended fix by updating the Linux Kernel.
For more details about this vulnerability, you can refer to the provided references link in the vulnerability details section.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
