Fix GICR_CTLR.RWP polling in irqchip/gic-v3
Summary
GSD-2022-1002303: irqchip/gic-v3: Fix GICR_CTLR.RWP polling. Affects Kernel versions >= 021f653791ad17e03f98aaa7fb933816ae16f161, < c7daf1b4ad809692d5c26f33c02ed8a031066548. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The irqchip/gic-v3 is a kernel module in the Linux Kernel that provides support for the Generic Interrupt Controller (GIC) version 3. The GIC is responsible for managing interrupts in ARM-based systems. It allows devices to signal the processor when they require attention. The GICR_CTLR.RWP register is used to control the behavior of the GIC. However, a vulnerability has been discovered in the way GICR_CTLR.RWP polling is performed.
Vulnerability Detail
The vulnerability in irqchip/gic-v3 arises from a flaw in the GICR_CTLR.RWP polling mechanism. This flaw could potentially be exploited by an attacker to manipulate the behavior of the GIC, leading to a denial of service or privilege escalation. The vulnerability was introduced in version v3.17 of the Linux Kernel and has been fixed in version v4.19.238. The fix addresses the issue by modifying the GICR_CTLR.RWP polling logic to ensure correct behavior.
How To Fix
No fixed version is published for this vulnerability.
To fix this vulnerability, it is recommended to update the Linux Kernel to version v4.19.238 or later. This can be done by downloading the latest stable version of the Linux Kernel from the official repository and following the installation instructions provided. Alternatively, users can check if their application is affected by this vulnerability using the Vulert Playground (https://vulert.com/scanner) without requiring access to the code or installation.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Conclusion
The vulnerability in irqchip/gic-v3 has been fixed in Linux Kernel version v4.19.238. It is important to update the Linux Kernel to the latest version to ensure the security and stability of the system. For further support on vulnerability remediation, you can contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
irqchip/gic-v3 is a kernel module in the Linux Kernel that provides support for the Generic Interrupt Controller (GIC) version 3. It manages interrupts in ARM-based systems.
GICR_CTLR.RWP is a register in the GIC that controls its behavior. The vulnerability in irqchip/gic-v3 arises from a flaw in the GICR_CTLR.RWP polling mechanism.
The vulnerability in irqchip/gic-v3 could be exploited by an attacker to manipulate the behavior of the GIC, leading to a denial of service or privilege escalation.
To fix this vulnerability, it is recommended to update the Linux Kernel to version v4.19.238 or later. Alternatively, you can use the Vulert Playground (https://vulert.com/scanner) to check if your application is affected without requiring access to the code or installation.
No specific workaround has been provided for this vulnerability. It is recommended to update the Linux Kernel to the latest version.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
Follow Vulert in Google
Get more Vulert vulnerability and dependency-security updates in Google Search and AI results.