Linux kernel
cpe:2.3:a:linux:linux_kernel:*:*:*:*:*:*:*, +4 more
A vulnerability in the Linux kernel's handling of lock pointers can lead to incorrect warning management on architectures that do not guarantee proper alignment. The issue arises because the kernel's blocker tracking mechanism expects lock pointers to be aligned to at least 4 bytes for effective type encoding. However, certain architectures, such as m68k, only ensure 2-byte alignment for 32-bit values. This misalignment can cause related WARN_ON_ONCE checks to trigger, indicating a potential problem. The vulnerability has been addressed by modifying the runtime checks to disregard any lock pointers that are not 4-byte aligned, thereby deactivating the tracking feature for those locks and preventing the associated warnings.
The vulnerability could cause misleading warnings to be generated, suggesting a problem where none exists, due to the kernel's incorrect handling of unaligned lock pointers on certain architectures.
Users can upgrade to the patched version of the Linux kernel available in the Linux kernel stable tree to address this vulnerability.
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.