CVE-2021-46928
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
27/02/2024
Last modified:
10/04/2024
Description
In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
parisc: Clear stale IIR value on instruction access rights trap<br />
<br />
When a trap 7 (Instruction access rights) occurs, this means the CPU<br />
couldn&#39;t execute an instruction due to missing execute permissions on<br />
the memory region. In this case it seems the CPU didn&#39;t even fetched<br />
the instruction from memory and thus did not store it in the cr19 (IIR)<br />
register before calling the trap handler. So, the trap handler will find<br />
some random old stale value in cr19.<br />
<br />
This patch simply overwrites the stale IIR value with a constant magic<br />
"bad food" value (0xbaadf00d), in the hope people don&#39;t start to try to<br />
understand the various random IIR values in trap 7 dumps.
Impact
Base Score 3.x
5.50
Severity 3.x
MEDIUM
Vulnerable products and versions
CPE | From | Up to |
---|---|---|
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 5.10.90 (excluding) | |
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 5.11.0 (including) | 5.15.13 (excluding) |
To consult the complete list of CPE names with products and versions, see this page