parisc: Clear stale IIR value on instruction access rights trap
Summary
GSD-2022-1000062: parisc: Clear stale IIR value on instruction access rights trap. Affects Kernel versions < e96373f0a5f484bc1e193f9951dcb3adf24bf3f7. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The parisc package is a component of the Linux Kernel ecosystem. It is responsible for supporting the PA-RISC architecture, which is used in some HP and Hitachi servers. The package provides the necessary functionality for running and managing software on these systems. However, a vulnerability has been discovered in the package that could potentially be exploited by attackers.
Vulnerability Detail
The vulnerability in the parisc package involves a failure to clear a stale IIR (Instruction Interrupt Register) value when an instruction access rights trap occurs. This could lead to incorrect execution of instructions and potentially allow an attacker to gain unauthorized access or perform malicious actions on the affected system. The impact and attack plausibility of this vulnerability have not been proven yet.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Conclusion
In conclusion, the parisc package in the Linux Kernel is vulnerable to a potential security issue related to a failure to clear a stale IIR value. Users are advised to update their Linux Kernel to version v5.15.13 or later to mitigate this vulnerability. For further support on vulnerability remediation, you can contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The parisc package is a component of the Linux Kernel ecosystem that supports the PA-RISC architecture used in some HP and Hitachi servers.
The impact of this vulnerability is not yet proven, but it could potentially allow an attacker to gain unauthorized access or perform malicious actions on the affected system.
Yes, this vulnerability has been fixed in the Linux Kernel version v5.15.13 by commit e96373f0a5f484bc1e193f9951dcb3adf24bf3f7.
To fix this vulnerability, you should update your Linux Kernel to version v5.15.13 or a later version that includes the fix.
You can find more information about this vulnerability in the Open Source Vulnerability Database (OSVDB) entry GSD-2022-1000062.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
