KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow in Kernel
Summary
GSD-2021-1001467: KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow. Affects Kernel versions >= 8e591cb7204739efa8e15967ea334eb367039dde, < 1e90a673f6ee09c668fe01aa1b94924f972c9811. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Kernel is a crucial component of the Linux operating system that provides core functionalities and acts as an interface between the hardware and software layers. It manages system resources, facilitates communication between different components, and ensures the security and stability of the system. The vulnerability in question affects the Kernel's PowerPC (PPC) Book3S module, which is responsible for virtualization on PPC-based systems using the Kernel-based Virtual Machine (KVM) technology.
Vulnerability Detail
The vulnerability identified in the PPC Book3S module of the Kernel is a buffer overflow issue in the H_RTAS (Hypervisor Run-Time Abstraction Services) component. This vulnerability can be exploited by an attacker to overwrite adjacent memory locations and potentially execute arbitrary code with elevated privileges. The impact of this vulnerability could range from denial of service (system crash) to remote code execution, depending on the attacker's capabilities and the system's configuration. The vulnerability was introduced in version v3.10 of the Kernel and has been fixed in version v4.4.277.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability.
Conclusion
The vulnerability in the PPC Book3S module of the Kernel poses a potential security risk, allowing attackers to execute arbitrary code or cause denial of service. To mitigate this risk, it is crucial to update the Kernel to version v4.4.277 or later. For further support on vulnerability remediation, you can reach out to DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The impact of this vulnerability can range from denial of service (system crash) to remote code execution, depending on the attacker's capabilities and the system's configuration.
You can use the Vulert Playground (https://vulert.com/scanner) to check if your system is affected by this vulnerability. Simply upload your manifest file (e.g., package-lock.json) and the playground will analyze it for potential vulnerabilities.
Yes, the vulnerability has been fixed in version v4.4.277 of the Kernel. It is recommended to update to this version or later to mitigate the risk.
Yes, this vulnerability can be exploited remotely if the attacker has the necessary access and knowledge of the target system.
There are no known instances of this vulnerability being exploited in the wild. However, it is always recommended to apply security patches promptly to minimize the risk.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
