Bug 1220750 (CVE-2021-47067)

Summary:	VUL-0: CVE-2021-47067: kernel: soc/tegra: regulators: lockup when voltage-spread is out of range
Product:	[Novell Products] SUSE Security Incidents	Reporter:	SMASH SMASH <smash_bz>
Component:	Incidents	Assignee:	Kernel Bugs <kernel-bugs>
Status:	RESOLVED FIXED	QA Contact:	Security Team bot <security-team>
Severity:	Normal
Priority:	P5 - None	CC:	carlos.lopez
Version:	unspecified
Target Milestone:	---
Hardware:	Other
OS:	Other
URL:	https://smash.suse.de/issue/395878/
Whiteboard:	CVSSv3.1:SUSE:CVE-2021-47067:4.3:(AV:P/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Found By:	Security Response Team	Services Priority:
Business Priority:		Blocker:	---
Marketing QA Status:	---	IT Deployment:	---

Description SMASH SMASH 2024-03-01 10:14:02 UTC

In the Linux kernel, the following vulnerability has been resolved:

soc/tegra: regulators: Fix locking up when voltage-spread is out of range

Fix voltage coupler lockup which happens when voltage-spread is out
of range due to a bug in the code. The max-spread requirement shall be
accounted when CPU regulator doesn't have consumers. This problem is
observed on Tegra30 Ouya game console once system-wide DVFS is enabled
in a device-tree.

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2021-47067
https://www.cve.org/CVERecord?id=CVE-2021-47067
https://git.kernel.org/stable/c/a1ad124c836816fac8bd5e461d36eaf33cee4e24
https://git.kernel.org/stable/c/dc4452867200fa94589b382740952b58aa1c3e6c
https://git.kernel.org/stable/c/ef85bb582c41524e9e68dfdbde48e519dac4ab3d
https://git.kernel.org/stable/c/ff39adf5d31c72025bba799aec69c5c86d81d549
https://bugzilla.redhat.com/show_bug.cgi?id=2267192

Comment 1 Carlos López 2024-03-01 10:14:47 UTC

Already fixed in cve/linux-5.14 and newer. Older branches are not affected. Closing.