CVE-2021-47006

ARM: 9064/1: hw_breakpoint: Do not directly check the event's overflow_handler hook

Medium · published February 28, 2024

CVSS v3.1
5.5
EPSS
0%
Percentile
15.9
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

ARM: 9064/1: hw_breakpoint: Do not directly check the event's overflow_handler hook

The commit 1879445dfa7b ("perf/core: Set event's default

::overflow_handler()") set a default event->overflow_handler in

perf_event_alloc(), and replace the check event->overflow_handler with

is_default_overflow_handler(), but one is missing.

Currently, the bp->overflow_handler can not be NULL. As a result,

enable_single_step() is always not invoked.

Comments from Zhen Lei:

https://patchwork.kernel.org/project/linux-arm-kernel/patch/[email protected]/

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00253 · 15.9th percentile
Published
2024-02-28T08:13Z
EPSS history
Timeline
  • 28 FEB 08:13Z
    ARM: 9064/1: hw_breakpoint: Do not directly check the event's overflow_handler hook
    cvelistv5