KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow in Kernel
Summary
UVI-2021-1001364: KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow. Affects Kernel versions >= 8e591cb7204739efa8e15967ea334eb367039dde, < 0493b10c06021796ba80cbe53c961defd5aca6e5. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
The Kernel is a fundamental component of the Linux operating system that provides core functionalities and interfaces between hardware and software. It manages system resources, facilitates communication between processes, and ensures security and stability. The vulnerability in question affects the Kernel's PowerPC (PPC) Book3S module, which is responsible for virtualization on PPC-based systems using the KVM (Kernel-based Virtual Machine) technology.
Vulnerability Detail
The vulnerability, identified as UVI-2021-1001364, is a buffer overflow issue in the H_RTAS (Hypervisor Run-Time Abstraction Services) component of the PPC Book3S module in the Kernel. This vulnerability can be exploited by an attacker to overwrite adjacent memory locations and potentially execute arbitrary code or crash the system. It was introduced in version v3.10 of the Linux Kernel and fixed in version v4.19.199. The impact and attack plausibility of this vulnerability have not been proven yet.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Conclusion
The vulnerability in the Kernel's PPC Book3S module, identified as UVI-2021-1001364, is a buffer overflow issue in the H_RTAS rets buffer. It can potentially allow an attacker to execute arbitrary code or crash the system. To mitigate this vulnerability, it is crucial to update the Linux Kernel to version v4.19.199 or later. For further support and assistance in vulnerability remediation, you can reach out to DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The impact of this vulnerability is not yet proven. However, if successfully exploited, an attacker could execute arbitrary code or crash the system.
You can check if your system is affected by this vulnerability by comparing the version of the Linux Kernel installed on your system with the fixed version (v4.19.199 or later). Alternatively, you can use vulnerability monitoring tools like Vulert (https://vulert.com) to scan your system and identify any vulnerable components.
No specific workarounds have been mentioned for this vulnerability. It is recommended to update the Linux Kernel to the fixed version.
Yes, this vulnerability is specific to PowerPC systems using the KVM technology.
You can find more information about this vulnerability in the vulnerability database maintained by the Cloud Security Alliance: https://github.com/cloudsecurityalliance/gsd-database/blob/main/2021/1001xxx/UVI-2021-1001364.json
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
