CVE-2021-47567

powerpc/32: Fix hardlockup on vmap stack overflow

Description

In the Linux kernel, the following vulnerability has been resolved: powerpc/32: Fix hardlockup on vmap stack overflow Since the commit c118c7303ad5 ("powerpc/32: Fix vmap stack - Do not activate MMU before reading task struct") a vmap stack overflow results in a hard lockup. This is because emergency_ctx is still addressed with its virtual address allthough data MMU is not active anymore at that time. Fix it by using a physical address instead.

N/A

CVSS

Severity:

EPSS 0.08%

Affected: Linux Linux

References

Link	Tags
https://git.kernel.org/stable/c/dfe906da9a1abebdebe8b15bb3e66a2578f6c4c7
https://git.kernel.org/stable/c/c4e3ff8b8b1d54f0c755670174c453b06e17114b
https://git.kernel.org/stable/c/5bb60ea611db1e04814426ed4bd1c95d1487678e

Frequently Asked Questions

What is the severity of CVE-2021-47567?: CVE-2021-47567 has not yet been assigned a CVSS score.
How to fix CVE-2021-47567?: To fix CVE-2021-47567, make sure you are using an up-to-date version of the affected component(s) by checking the vendor release notes. As for now, there are no other specific guidelines available.
Is CVE-2021-47567 being actively exploited in the wild?: As for now, there are no information to confirm that CVE-2021-47567 is being actively exploited. According to its EPSS score, there is a ~0% probability that this vulnerability will be exploited by malicious actors in the next 30 days.
What software or system is affected by CVE-2021-47567?: CVE-2021-47567 affects Linux Linux, Linux Linux.

This platform uses data from the NIST NVD, MITRE CVE, MITRE CWE, First.org and CISA KEV but is not endorsed or certified by these entities. CVE is a registred trademark of the MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. CWE is a registred trademark of the MITRE Corporation and the authoritative source of CWE content is MITRE's CWE web site.