CVE-2021-47317CWE-667

CVE-2021-47317

High · published May 21, 2024

CVSS v3.1
7.8
EPSS
0%
Percentile
7.9
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

powerpc/bpf: Fix detecting BPF atomic instructions

Commit 91c960b0056672 ("bpf: Rename BPF_XADD and prepare to encode other

atomics in .imm") converted BPF_XADD to BPF_ATOMIC and added a way to

distinguish instructions based on the immediate field. Existing JIT

implementations were updated to check for the immediate field and to

reject programs utilizing anything more than BPF_ADD (such as BPF_FETCH)

in the immediate field.

However, the check added to powerpc64 JIT did not look at the correct

BPF instruction. Due to this, such programs would be accepted and

incorrectly JIT'ed resulting in soft lockups, as seen with the atomic

bounds test. Fix this by looking at the correct immediate value.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00187 · 7.9th percentile
Weakness
CWE-667 · Improper Locking
Published
2024-05-21T19:15Z
Affected products (2)
ProductVersionsFixed in
linux/linux_kernel≥ 5.12, < 5.12.195.12.19
linux/linux_kernel≥ 5.13, < 5.13.45.13.4
References (6)
EPSS history
Timeline
  • 21 MAY 14:35Z
    powerpc/bpf: Fix detecting BPF atomic instructions
    cvelistv5