perf/x86/amd/core: Always clear status for idx (Linux Linux)

CVE-2023-53073
MEDIUM 5.5

At a glance

Source
NVD
EPSS
EPSS 0.20 % · percentile 10 ()
State
PUBLISHED
Published
Updated
Assigner
Linux
NVD status
Analyzed

Description

In the Linux kernel, the following vulnerability has been resolved: perf/x86/amd/core: Always clear status for idx The variable 'status' (which contains the unhandled overflow bits) is not being properly masked in some cases, displaying the following warning: WARNING: CPU: 156 PID: 475601 at arch/x86/events/amd/core.c:972 amd_pmu_v2_handle_irq+0x216/0x270 This seems to be happening because the loop is being continued before the status bit being unset, in case x86_perf_event_set_period() returns 0. This is also causing an inconsistency because the "handled" counter is incremented, but the status bit is not cleaned. Move the bit cleaning together above, together when the "handled" counter is incremented.

References

Scores

VersionScoreVectorScored by
CVSS 3.1MEDIUM 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HNVD · nvd@nist.gov (Primary)

European references

CERT-FR advisories

Affected configurations (NVD CPE)

Affected products

ProductVersions
Linux · Linuxaffected 7685665c390dc68c2d9a74e8445f41494cc8f6cf < ab33a8f7649b0324639a336e1081aaea51a4523e ; affected 7685665c390dc68c2d9a74e8445f41494cc8f6cf < 9d4c7b1f12e101d6d6253092588b127416ddfb6c ; affected 7685665c390dc68c2d9a74e8445f41494cc8f6cf < 263f5ecaf7080513efc248ec739b6d9e00f4129f
Linux · Linuxaffected 5.19 ; unaffected 0 < 5.19 ; unaffected 6.1.22 ≤ 6.1.* ; unaffected 6.2.9 ≤ 6.2.* ; unaffected 6.3 ≤ *

Sources

SourceLicence
CVE List (CVEProject cvelistV5)CVE Program Terms of Use
EPSS (FIRST.org)FIRST — attribution requested
ENISA EUVDENISA — reproduction authorised, source acknowledged
CERT-FR (ANSSI)Licence Ouverte / Etalab 2.0
NVD (NIST) via fkie-cad/nvd-json-data-feedsPublic domain — this product uses data from the NVD API but is not endorsed or certified by the NVD