Vulnerability in Kernel Package: arm64: dts: qcom: msm8998
Summary
GSD-2021-1002297: arm64: dts: qcom: msm8998: Fix CPU/L2 idle state latency and residency. Affects Kernel versions < e52fecdd0c142b95c720683885b06ee3f0e065c8. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Kernel package is a fundamental component of the Linux operating system, responsible for managing system resources and providing an interface between hardware and software. It includes various device drivers, file systems, and core functionalities. The specific vulnerability affects the arm64 architecture and the qcom msm8998 device tree source (DTS).
Vulnerability Detail
The vulnerability in the arm64: dts: qcom: msm8998 component of the Kernel package relates to CPU/L2 idle state latency and residency. It can potentially lead to performance issues and inefficient power management. The vulnerability has been fixed in Linux Kernel version v5.10.82 by commit e52fecdd0c142b95c720683885b06ee3f0e065c8.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Conclusion
The vulnerability in the Kernel package's arm64: dts: qcom: msm8998 component can lead to performance issues and inefficient power management. It is crucial to update the Kernel to version v5.10.82 or later to mitigate this vulnerability. For further support and assistance in vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The vulnerability can result in increased CPU/L2 idle state latency and residency, leading to performance degradation and inefficient power management.
No, this vulnerability specifically affects systems utilizing the qcom msm8998 device tree source (DTS). If your system does not use this particular component, it is not affected.
No, this vulnerability does not introduce any remote code execution or remote access capabilities. It primarily affects the performance and power management aspects of the system.
No, there are no known workarounds for this vulnerability. Updating the Kernel package to the fixed version is the recommended solution.
You can find more information about this vulnerability in the official Linux Kernel repository and the associated commit e52fecdd0c142b95c720683885b06ee3f0e065c8.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
