Vulnerability in Kernel: Fix CPU/L2 idle state latency and residency

Kernel Updated 02 Oct 2025

Summary

29/11/2021
N/A
No i
Unrated
Not published

GSD-2021-1002342: arm64: dts: qcom: msm8998: Fix CPU/L2 idle state latency and residency. Affects Kernel versions < 118c826ef8b43efe0fda8faf419673707ee8c5e5. No fix is published. How to fix ↓

Free scan

Check if this vulnerability affects your application

Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.

Check my app free

No signup required · Results in about 60 seconds

Upload your dependency manifest or SBOM

Drag & drop your file here or

Java Javascript PHP Python Go Rust Ruby Dart C/C++ Elixir CycloneDX SPDX

Upload a supported dependency manifest or SBOM. No installation or source-code access required.

See supported files and SBOM formats
SBOM sbom.json · bom.json · bom.xml · *.spdx.json · *.cdx.json · *.cdx.xml
Java pom.xml · gradle.lockfile · buildscript-gradle.lockfile
Javascript package-lock.json · yarn.lock · pnpm-lock.yaml
PHP composer.lock
Python poetry.lock · requirements.txt · Pipfile.lock
Go go.mod
Rust Cargo.lock
Ruby Gemfile.lock
Dart pubspec.lock
C/C++ conan.lock
Elixir mix.lock
Enter your work email to receive your report link.

Verify your email to view the full report and start 30 days of continuous monitoring. No credit card required.

Sponsored MarkAI Find prospects already talking about the problem you solve AI watches the communities your customers use to find qualified prospects, then alerts you when a conversation is worth joining. See MarkAI

Background

The Kernel is a fundamental component of the Linux operating system that acts as a bridge between the hardware and software layers. It provides essential functionalities, such as memory management, process scheduling, and device drivers. The vulnerability in question affects the Kernel's arm64 architecture, specifically the qcom msm8998 variant. This vulnerability pertains to the CPU/L2 idle state latency and residency, which can lead to potential security risks if not addressed.

Vulnerability Detail

The vulnerability arises from incorrect CPU/L2 idle state latency and residency in the qcom msm8998 variant of the Kernel's arm64 architecture. This issue can potentially be exploited by attackers to gain unauthorized access or perform other malicious activities. The impact and attack plausibility of this vulnerability have not been proven yet. It is crucial to update to Linux Kernel version v5.15.5 or later, as this vulnerability has been fixed in commit 118c826ef8b43efe0fda8faf419673707ee8c5e5.

How To Fix

No fixed version is published for this vulnerability.

To fix this vulnerability, it is recommended to update the Linux Kernel to version v5.15.5 or later. This can be done by following the steps below:

  1. Identify the current version of the Linux Kernel installed on your system.
  2. Visit the official Linux Kernel repository at https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/.
  3. Locate the release corresponding to version v5.15.5 or later.
  4. Follow the instructions provided in the repository to download and install the updated Kernel version.
  5. After installation, restart your system to apply the changes.

Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →

Conclusion

In conclusion, the vulnerability in the Kernel's arm64 architecture, specifically the qcom msm8998 variant, regarding CPU/L2 idle state latency and residency, can pose potential security risks. It is crucial to update to Linux Kernel version v5.15.5 or later, as this vulnerability has been fixed in commit 118c826ef8b43efe0fda8faf419673707ee8c5e5. For further support on vulnerability remediation, please contact DevNack.com.

See every vulnerability recorded for Kernel →

Share this vulnerability

FAQ

The impact of this vulnerability is not yet proven. However, if exploited, it could potentially lead to unauthorized access or other security breaches.

No specific workaround has been mentioned for this vulnerability. It is recommended to update to the fixed version of the Linux Kernel.

You can use the Vulert Playground at Vulert Scanner to check if your system is affected by this vulnerability. Simply upload your manifest file, such as package-lock.json, and Vulert will provide real-time alerts for open-source vulnerabilities.

For more details about the fix for this vulnerability, you can refer to the commit 118c826ef8b43efe0fda8faf419673707ee8c5e5 in the Linux Kernel repository.

It is highly recommended to update to the fixed version of the Linux Kernel to mitigate the potential security risks associated with this vulnerability.

Related vulnerabilities

Recent vulnerabilities recorded for Kernel.

How To Fix

No fixed version is published for this vulnerability.

To fix this vulnerability, it is recommended to update the Linux Kernel to version v5.15.5 or later. This can be done by following the steps below:

  1. Identify the current version of the Linux Kernel installed on your system.
  2. Visit the official Linux Kernel repository at https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/.
  3. Locate the release corresponding to version v5.15.5 or later.
  4. Follow the instructions provided in the repository to download and install the updated Kernel version.
  5. After installation, restart your system to apply the changes.

Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →

Subscribe to Vulert on Telegram
Daily digest of new CVEs, critical and high severity, affected packages and fixes — plus a weekly roundup.
Join the channel →
Help improve this record
Report an issue or send feedback

Follow Vulert in Google

Get more Vulert vulnerability and dependency-security updates in Google Search and AI results.