parisc: Fix data TLB miss in sba_unmap_sg
Summary
GSD-2022-1000295: parisc: Fix data TLB miss in sba_unmap_sg. Affects Kernel versions < f23f0444ead4d941165aa82ce2fcbb997dc00e97. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The parisc package is a component of the Linux Kernel, which is responsible for managing the hardware and software resources of the Parisc architecture. It provides support for Parisc-based systems, including processors, memory management, and device drivers. The vulnerability in question affects the data TLB miss in the sba_unmap_sg function.
Vulnerability Detail
The vulnerability arises from a data TLB miss in the sba_unmap_sg function within the parisc package. This issue could potentially be exploited by an attacker to gain unauthorized access or execute arbitrary code. The vulnerability has been identified and fixed in the Linux Kernel version v4.9.303 by commit f23f0444ead4d941165aa82ce2fcbb997dc00e97.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability.
Conclusion
In conclusion, the parisc package in the Linux Kernel is vulnerable to a data TLB miss in the sba_unmap_sg function. It is recommended to update the Linux Kernel to version v4.9.303 or later to mitigate this vulnerability. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
This vulnerability could potentially allow an attacker to gain unauthorized access or execute arbitrary code.
At the time of this report, there is no known exploit for this vulnerability.
The vulnerability is present in versions of the Linux Kernel prior to v4.9.303.
Yes, the vulnerability has been fixed in the Linux Kernel version v4.9.303 by commit f23f0444ead4d941165aa82ce2fcbb997dc00e97.
More information about this vulnerability can be found in the source database: https://github.com/cloudsecurityalliance/gsd-database/blob/main/2022/1000xxx/GSD-2022-1000295.json
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.