Fix GICR_CTLR.RWP polling in irqchip/gic-v3
Summary
GSD-2022-1001969: irqchip/gic-v3: Fix GICR_CTLR.RWP polling. Affects Kernel versions >= 021f653791ad17e03f98aaa7fb933816ae16f161, < ff24114bb08d8b90edf2aff0a4fd0689523e6c17. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The irqchip/gic-v3 is a component of the Linux Kernel that handles interrupt requests for systems using the GICv3 architecture. It provides support for managing interrupts and distributing them to the appropriate processors. The GICR_CTLR.RWP polling vulnerability affects this component.
Vulnerability Detail
The GICR_CTLR.RWP polling vulnerability in irqchip/gic-v3 allows an attacker to exploit a flaw in the GICR_CTLR.RWP register polling mechanism. This vulnerability can potentially lead to unauthorized access or control of the interrupt controller, compromising the stability and security of the system. The vulnerability was introduced in version v3.17 of the Linux Kernel and has been fixed in version v5.10.111.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability.
Conclusion
The GICR_CTLR.RWP polling vulnerability in irqchip/gic-v3 can be fixed by updating the Linux Kernel to version v5.10.111 or later. It is important to promptly apply the necessary updates to ensure the stability and security of the system. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
irqchip/gic-v3 is a component of the Linux Kernel that handles interrupt requests for systems using the GICv3 architecture.
GICR_CTLR.RWP is a register in the GICv3 architecture that is used for polling and controlling the interrupt controller.
The GICR_CTLR.RWP polling vulnerability can potentially allow an attacker to gain unauthorized access or control of the interrupt controller, compromising the stability and security of the system.
The vulnerability was introduced in version v3.17 of the Linux Kernel.
To fix the vulnerability, it is recommended to update the Linux Kernel to version v5.10.111 or later.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
