powerpc/idle: Don't corrupt back chain when going idle
Summary
GSD-2021-1001819: powerpc/idle: Don't corrupt back chain when going idle. Affects Kernel versions >= 80bbb0bc3a0288442f7fe6fc514f4ee1cb06ccb7, < 8e25a62e8dab7bb09da337354ed1be5df61f83a0. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The powerpc/idle package is a component of the Linux Kernel that handles the idle state of powerpc processors. It is responsible for managing the transition of the processor to a low-power state when it is not actively processing tasks. The idle state is crucial for power management and energy efficiency in powerpc-based systems.
Vulnerability Detail
The vulnerability in the powerpc/idle package allows for the corruption of the back chain when the processor goes idle. This corruption can lead to various issues, including potential security vulnerabilities. The vulnerability was introduced in version v5.4.156 of the Linux Kernel by commit 80bbb0bc3a0288442f7fe6fc514f4ee1cb06ccb7 and has been fixed in version v5.4.156 by commit 8e25a62e8dab7bb09da337354ed1be5df61f83a0. The impact and attack plausibility of this vulnerability have not been proven yet.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
No specific workaround has been provided for this vulnerability.
Conclusion
The powerpc/idle package in the Linux Kernel is vulnerable to a corruption of the back chain when going idle. It is recommended to update the Linux Kernel to version v5.4.156 or later to mitigate this vulnerability. For further support on vulnerability remediation, you can contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The powerpc/idle package is a component of the Linux Kernel that handles the idle state of powerpc processors.
The impact of this vulnerability is currently unknown, as the actual attack plausibility and consequences have not been proven.
To fix this vulnerability, it is recommended to update the Linux Kernel to version v5.4.156 or later.
No specific workaround has been provided for this vulnerability.
For more details about this vulnerability, you can refer to the official vulnerability report: https://github.com/cloudsecurityalliance/gsd-database/blob/main/2021/1001xxx/GSD-2021-1001819.json
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.