Vulnerability in powerpc/smp Package: CPU Offline Preempt Count Decrement
Summary
GSD-2021-1001849: powerpc/smp: do not decrement idle task preempt count in CPU offline. Affects Kernel versions >= bdf4d33e8342b90386156204e1da0cdfdb4bf146, < 53770a411559cf7bc0906d1df319cc533d2f4f58. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The powerpc/smp package is a component of the Linux Kernel, which is responsible for managing symmetric multiprocessing (SMP) on PowerPC architectures. It enables the utilization of multiple processors or cores to execute tasks concurrently, improving system performance. The vulnerability in this package relates to the decrementing of the idle task preempt count during CPU offline operations.
Vulnerability Detail
The vulnerability occurs when the idle task preempt count is incorrectly decremented during CPU offline operations in the powerpc/smp package. This decrement operation can lead to a race condition where the idle task can be preempted by another task, potentially causing unexpected behavior or system instability. While the impact and attack plausibility of this vulnerability have not been proven, it is important to address it to ensure system reliability and security.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability.
Conclusion
The vulnerability in the powerpc/smp package related to the incorrect decrementing of the idle task preempt count during CPU offline operations can potentially lead to unexpected behavior or system instability. It is crucial to update the Linux Kernel to version v5.10.76 or later to address this vulnerability. For further support or assistance in vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The powerpc/smp package is a component of the Linux Kernel that enables symmetric multiprocessing on PowerPC architectures, allowing for the utilization of multiple processors or cores.
The impact of this vulnerability is not yet proven, but it has the potential to cause unexpected behavior or system instability due to a race condition during CPU offline operations.
To fix this vulnerability, it is recommended to update the Linux Kernel to version v5.10.76 or later, which includes the necessary fix for this issue.
No specific workarounds have been mentioned for this vulnerability.
You can find more information about this vulnerability in the Open Source Vulnerability Database (OSVDB) entry with ID GSD-2021-1001849.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
