CVSS 5.5 · Medium EPSS 0,24%
Kerentanan pada linux kernel, debian linux. Skor CVSS 3.1 5.5 (Medium) menurut NVD.
In the Linux kernel, the following vulnerability has been resolved: pstore/ram: Fix crash when setting number of cpus to an odd number When the number of cpu cores is adjusted to 7 or other odd numbers, the zone size will become an odd number. The address of the zone will become: addr of zone0 = BASE addr of zone1 = BASE + zone_size addr of zone2 = BASE + zone_size*2 ... The address of zone1/3/5/7 will be mapped to non-alignment va. Eventually crashes will occur when accessing these va. So, use ALIGN_DOWN() to make sure the zone size is even to avoid this bug.
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
· uraikan di kalkulator | Vendor | Produk | Versi terdampak |
|---|---|---|
| linux | linux kernel | Semua versi sebelum 4.19.307 |
| linux | linux kernel | Versi 4.20 hingga sebelum 5.4.269 |
| linux | linux kernel | Versi 5.5 hingga sebelum 5.10.210 |
| linux | linux kernel | Versi 5.11 hingga sebelum 5.15.149 |
| linux | linux kernel | Versi 5.16 hingga sebelum 6.1.77 |
| linux | linux kernel | Versi 6.2 hingga sebelum 6.6.16 |
| linux | linux kernel | Versi 6.7 hingga sebelum 6.7.4 |
| debian | debian linux | Versi 10.0 |