Wind River Support Network

HomeDefectsLIN1019-11107
Not to be fixed

LIN1019-11107 : Security Advisory - linux - CVE-2021-46940

Created: Feb 27, 2024    Updated: Mar 19, 2024
Resolved Date: Mar 19, 2024
Found In Version: 10.19.45.1
Severity: Standard
Applicable for: Wind River Linux LTS 19
Component/s: Kernel

Description

In the Linux kernel, the following vulnerability has been resolved:

tools/power turbostat: Fix offset overflow issue in index converting

The idx_to_offset() function returns type int (32-bit signed), but
MSR_PKG_ENERGY_STAT is u32 and would be interpreted as a negative number.
The end result is that it hits the if (offset < 0) check in update_msr_sum()
which prevents the timer callback from updating the stat in the background when
long durations are used. The similar issue exists in offset_to_idx() and
update_msr_sum(). Fix this issue by converting the 'int' to 'off_t' accordingly.

CREATE(Triage):(User=admin) CVE-2021-46940 (https://nvd.nist.gov/vuln/detail/CVE-2021-46940)
Live chat
Online