Clocksource/Drivers/Exynos_mct: Handle DTS with Higher Number of Interrupts
Summary
GSD-2022-1002117: clocksource/drivers/exynos_mct: Handle DTS with higher number of interrupts. Affects Kernel versions >= 36ba5d527e9567ed303bad6e86a5f3c2723470f6, < db9d00461bdf9a0567a899f2980cf47f4217476d. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The clocksource/drivers/exynos_mct package is a component of the Linux Kernel ecosystem. It provides support for the Exynos Multi-Core Timer (MCT) clocksource driver on Exynos-based systems. The MCT is responsible for providing a high-resolution timer for timekeeping purposes. This vulnerability affects versions of the Linux Kernel starting from v3.10 and was fixed in v5.10.110. The vulnerability arises when handling devices tree source (DTS) with a higher number of interrupts.
Vulnerability Detail
The vulnerability in clocksource/drivers/exynos_mct allows an attacker to exploit devices tree source (DTS) with a higher number of interrupts. The impact and attack plausibility of this vulnerability have not been proven yet. However, if successfully exploited, it could lead to various security risks, including potential privilege escalation or denial of service attacks. The vulnerability was introduced in Linux Kernel v3.10 and was fixed in v5.10.110 by commit db9d00461bdf9a0567a899f2980cf47f4217476d.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability.
Conclusion
The clocksource/drivers/exynos_mct vulnerability in the Linux Kernel can potentially lead to security risks if successfully exploited. It is crucial to update the Linux Kernel to version v5.10.110 or later to mitigate this vulnerability. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
clocksource/drivers/exynos_mct is a component of the Linux Kernel that provides support for the Exynos Multi-Core Timer (MCT) clocksource driver on Exynos-based systems. It is responsible for providing a high-resolution timer for timekeeping purposes.
The impact of this vulnerability is not yet proven. However, if successfully exploited, it could lead to potential privilege escalation or denial of service attacks.
To fix this vulnerability, it is recommended to update the Linux Kernel to version v5.10.110 or later. Alternatively, users can apply the specific commit (db9d00461bdf9a0567a899f2980cf47f4217476d) that fixes the vulnerability.
This vulnerability was introduced in Linux Kernel version v3.10.
This vulnerability was fixed in Linux Kernel version v5.10.110 by commit db9d00461bdf9a0567a899f2980cf47f4217476d.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
