Vulnerability in powerpc/set_memory: Avoid spinlock recursion in change_page_attr()
Summary
GSD-2022-1001726: powerpc/set_memory: Avoid spinlock recursion in change_page_attr(). Affects Kernel versions < 6def4eaf0391f24be541633a954c0e4876858b1e. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
The powerpc/set_memory package is a component of the Linux Kernel, which is responsible for managing memory operations on powerpc architecture systems. It provides functions and utilities for changing page attributes, such as permissions and caching. This vulnerability specifically affects the change_page_attr() function, which is prone to spinlock recursion.
Vulnerability Detail
The vulnerability in powerpc/set_memory arises from a potential spinlock recursion issue in the change_page_attr() function. Spinlock recursion occurs when a thread attempts to acquire a spinlock that it already holds, leading to a deadlock situation. In this case, the recursion happens within the change_page_attr() function, which can be triggered by an attacker with sufficient privileges. The impact of this vulnerability is not yet proven, but it has the potential to cause system instability or crashes. The vulnerability has been fixed in Linux Kernel version v5.15.34 by commit 6def4eaf0391f24be541633a954c0e4876858b1e.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability. The recommended approach is to apply the fix by updating the Linux Kernel.
Conclusion
The vulnerability in powerpc/set_memory's change_page_attr() function can lead to spinlock recursion, potentially causing system instability or crashes. It is crucial to update the Linux Kernel to version v5.15.34 or later to mitigate this vulnerability. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The powerpc/set_memory package is a component of the Linux Kernel that handles memory operations on powerpc architecture systems.
The vulnerability is a spinlock recursion issue in the change_page_attr() function, which can lead to system instability or crashes.
To fix this vulnerability, update the Linux Kernel to version v5.15.34 or later.
The updated Linux Kernel source code can be obtained from the official Linux Kernel repository at https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/.
No specific workaround is mentioned. It is recommended to apply the fix by updating the Linux Kernel.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
