Lockup on Kernel Exec Fault in powerpc/mm
Summary
UVI-2021-1001360: powerpc/mm: Fix lockup on kernel exec fault. Affects Kernel versions >= d3ca587404b36943b02df87406054ce73cc49500, < a82471a14aad90f79d1608d2bcbb019f0ffb53f0. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The powerpc/mm package is a component of the Linux Kernel, which is responsible for managing memory in the PowerPC architecture. It provides functions and data structures for handling memory management operations, such as page table management and virtual memory mapping. The package is widely used in PowerPC-based systems running the Linux operating system.
Vulnerability Detail
The vulnerability identified as UVI-2021-1001360 in the powerpc/mm package can lead to a lockup on a kernel exec fault. When this vulnerability is triggered, it can cause the system to become unresponsive, potentially leading to a denial of service (DoS) condition. The vulnerability was introduced in version v4.14 of the Linux Kernel and was fixed in version v5.4.133. The specific commit that addressed this issue is a82471a14aad90f79d1608d2bcbb019f0ffb53f0. Further technical details and references can be found in the provided source link.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
No specific workaround has been mentioned for this vulnerability.
Conclusion
The vulnerability in the powerpc/mm package can lead to a lockup on a kernel exec fault, potentially causing a denial of service (DoS) condition. It is recommended to update the Linux Kernel to version v5.4.133 or later to mitigate this vulnerability. For further support on vulnerability remediation, you can contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The vulnerability can lead to a lockup on a kernel exec fault, causing the system to become unresponsive and potentially resulting in a denial of service (DoS) condition.
The vulnerability was introduced in version v4.14 of the Linux Kernel.
Yes, the vulnerability has been fixed in version v5.4.133 of the Linux Kernel.
More information about this vulnerability can be found in the provided source link.
To update the Linux Kernel, you can obtain the updated kernel source code from the official Linux Kernel repository and compile it for your system. Alternatively, you can wait for your Linux distribution to provide an updated package containing the fixed version of the kernel.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
