Fix GICR_CTLR.RWP polling in irqchip/gic-v3
Summary
GSD-2022-1001673: irqchip/gic-v3: Fix GICR_CTLR.RWP polling. Affects Kernel versions >= 021f653791ad17e03f98aaa7fb933816ae16f161, < 7218a789abb3e033f5f3a85636ca50d9ae7b0fc9. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The irqchip/gic-v3 is a component of the Linux Kernel that handles interrupt handling for ARM-based systems. It provides support for the Generic Interrupt Controller (GIC) version 3, which is commonly used in ARM-based processors. The GIC is responsible for managing and distributing interrupts to the appropriate processors in a multi-core system. The GICR_CTLR.RWP polling vulnerability affects the irqchip/gic-v3 component and can potentially lead to security issues in systems that use this component.
Vulnerability Detail
The GICR_CTLR.RWP polling vulnerability in irqchip/gic-v3 allows an attacker to manipulate the GICR_CTLR.RWP register, which controls the write permission for the Redistributor registers. By exploiting this vulnerability, an attacker could gain unauthorized write access to these registers, potentially leading to privilege escalation or other security breaches. This vulnerability was introduced in version v3.17 of the Linux Kernel and has been fixed in version v5.15.34.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Conclusion
The GICR_CTLR.RWP polling vulnerability in irqchip/gic-v3 can be mitigated by updating the Linux Kernel to version v5.15.34 or later. This update includes the necessary patch to address the vulnerability. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
irqchip/gic-v3 is a component of the Linux Kernel that handles interrupt handling for ARM-based systems. It provides support for the Generic Interrupt Controller (GIC) version 3.
GICR_CTLR.RWP is a register in the GIC version 3 that controls the write permission for the Redistributor registers.
The GICR_CTLR.RWP polling vulnerability allows an attacker to gain unauthorized write access to the Redistributor registers, potentially leading to privilege escalation or other security breaches.
The GICR_CTLR.RWP polling vulnerability was introduced in version v3.17 of the Linux Kernel.
Yes, the GICR_CTLR.RWP polling vulnerability has been fixed in version v5.15.34 of the Linux Kernel.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
