CVSS 5.5 · Medium EPSS 0,21%
Kerentanan Loop with Unreachable Exit Condition ('Infinite Loop') pada linux kernel. Skor CVSS 3.1 5.5 (Medium) menurut NVD.
In the Linux kernel, the following vulnerability has been resolved: tee: optee: Fix supplicant wait loop OP-TEE supplicant is a user-space daemon and it's possible for it be hung or crashed or killed in the middle of processing an OP-TEE RPC call. It becomes more complicated when there is incorrect shutdown ordering of the supplicant process vs the OP-TEE client application which can eventually lead to system hang-up waiting for the closure of the client application. Allow the client process waiting in kernel for supplicant response to be killed rather than indefinitely waiting in an unkillable state. Also, a normal uninterruptible wait should not have resulted in the hung-task watchdog getting triggered, but the endless loop would. This fixes issues observed during system reboot/shutdown when supplicant got hung for some reason or gets crashed/killed which lead to client getting hung in an unkillable state. It in turn lead to system being in hung up state requiring hard power off/on to recover.
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
· uraikan di kalkulator | Vendor | Produk | Versi terdampak |
|---|---|---|
| linux | linux kernel | Versi 4.12 hingga sebelum 5.4.291 |
| linux | linux kernel | Versi 5.5 hingga sebelum 5.10.235 |
| linux | linux kernel | Versi 5.11 hingga sebelum 5.15.179 |
| linux | linux kernel | Versi 5.16 hingga sebelum 6.1.130 |
| linux | linux kernel | Versi 6.2 hingga sebelum 6.6.80 |
| linux | linux kernel | Versi 6.7 hingga sebelum 6.12.17 |
| linux | linux kernel | Versi 6.13 hingga sebelum 6.13.5 |
| linux | linux kernel | Versi 6.14 rc1 |
| linux | linux kernel | Versi 6.14 rc2 |
| linux | linux kernel | Versi 6.14 rc3 |