Vulnerability in Kernel: PM: core: keep irq flags in device_pm_check_callbacks()
Summary
GSD-2022-1002053: PM: core: keep irq flags in device_pm_check_callbacks(). Affects Kernel versions < ede1ef1a7de973321699736ef96d01a4b9a6fe9e. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Kernel is a crucial component of the Linux operating system that manages communication between hardware and software. It provides essential functions and services for the proper functioning of the system. The PM (Power Management) core is responsible for managing power-related operations, such as device sleep and wake-up. The device_pm_check_callbacks() function is a part of the PM core and is used to check and execute power management callbacks for devices. However, a vulnerability has been discovered in this function.
Vulnerability Detail
The vulnerability in the device_pm_check_callbacks() function of the Kernel's PM core allows an attacker to manipulate the irq flags, potentially leading to security breaches. By exploiting this vulnerability, an attacker could gain unauthorized access to sensitive information, modify system behavior, or cause a denial of service. The impact and attack plausibility of this vulnerability have not been proven yet.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability. Users are advised to update their Kernel to the fixed version as mentioned in the 'how_to_fix' section.
Conclusion
The vulnerability in the Kernel's PM core has the potential to be exploited by attackers to gain unauthorized access or cause system disruptions. It is crucial to update the Kernel to the fixed version to mitigate this vulnerability. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The Kernel is a crucial component of the Linux operating system that manages communication between hardware and software.
The PM (Power Management) core in the Kernel is responsible for managing power-related operations, such as device sleep and wake-up.
The device_pm_check_callbacks() function is a part of the PM core in the Kernel and is used to check and execute power management callbacks for devices.
The potential consequences of this vulnerability include unauthorized access to sensitive information, system behavior modification, or denial of service.
To fix this vulnerability, users should update their Kernel to version v5.10.110 or a later one.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
