Bug 1220624 (CVE-2021-46940) - VUL-0: CVE-2021-46940: kernel: tools/power turbostat: Fix offset overflow issue in index converting
Summary: VUL-0: CVE-2021-46940: kernel: tools/power turbostat: Fix offset overflow iss...
Status: RESOLVED INVALID
Alias: CVE-2021-46940
Product: SUSE Security Incidents
Classification: Novell Products
Component: Incidents (show other bugs)
Version: unspecified
Hardware: Other Other
: P3 - Medium : Normal
Target Milestone: ---
Assignee: Security Team bot
QA Contact: Security Team bot
URL: https://smash.suse.de/issue/395347/
Whiteboard: CVSSv3.1:SUSE:CVE-2021-46940:5.5:(AV:...
Keywords:
Depends on:
Blocks:
 
Reported: 2024-02-29 09:02 UTC by SMASH SMASH
Modified: 2024-04-29 07:12 UTC (History)
2 users (show)

See Also:
Found By: Security Response Team
Services Priority:
Business Priority:
Blocker: ---
Marketing QA Status: ---
IT Deployment: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description SMASH SMASH 2024-02-29 09:02:21 UTC
In the Linux kernel, the following vulnerability has been resolved:

tools/power turbostat: Fix offset overflow issue in index converting

The idx_to_offset() function returns type int (32-bit signed), but
MSR_PKG_ENERGY_STAT is u32 and would be interpreted as a negative number.
The end result is that it hits the if (offset < 0) check in update_msr_sum()
which prevents the timer callback from updating the stat in the background when
long durations are used. The similar issue exists in offset_to_idx() and
update_msr_sum(). Fix this issue by converting the 'int' to 'off_t' accordingly.

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2021-46940
https://www.cve.org/CVERecord?id=CVE-2021-46940
https://bugzilla.redhat.com/show_bug.cgi?id=2266494
https://lore.kernel.org/linux-cve-announce/20240227184057.2368370-5-gregkh@linuxfoundation.org/T/#u

Patch:
https://git.kernel.org/stable/c/13a779de4175df602366d129e41782ad7168cef0
Comment 1 Andrea Mattiazzo 2024-02-29 09:02:48 UTC
Closing since all code streams are already patched or not affected.
Comment 3 Michal Hocko 2024-04-26 17:03:40 UTC
This is not a kernel code. This is a powertop tool and as such shouldn't really be considered security relevant. Please close as invalid