Total vulnerabilities in the database
In the Linux kernel, the following vulnerability has been resolved:
pstore/ram: Fix crash when setting number of cpus to an odd number
When the number of cpu cores is adjusted to 7 or other odd numbers, the zone size will become an odd number. The address of the zone will become: addr of zone0 = BASE addr of zone1 = BASE + zone_size addr of zone2 = BASE + zone_size*2 ... The address of zone1/3/5/7 will be mapped to non-alignment va. Eventually crashes will occur when accessing these va.
So, use ALIGN_DOWN() to make sure the zone size is even to avoid this bug.
| Software | From | Fixed in |
|---|---|---|
| linux / linux_kernel | 5.11 | 5.15.149 |
| linux / linux_kernel | 5.5 | 5.10.210 |
| linux / linux_kernel | 6.7 | 6.7.4 |
| linux / linux_kernel | 6.2 | 6.6.16 |
| linux / linux_kernel | 5.16 | 6.1.77 |
| linux / linux_kernel | 4.20 | 5.4.269 |
| linux / linux_kernel | - | 4.19.307 |
| debian / debian_linux | 10.0 | 10.0.x |