REDHAT-BUG-2350367: Null Pointer Dereference
In the Linux kernel, the following vulnerability has been resolved:
OPP: fix devpmoppfindbw() when bandwidth table not initialized
If a driver calls devpmoppfindbwceil/floor() the retrieve bandwidth from the OPP table but the bandwidth table was not created because the interconnect properties were missing in the OPP consumer node, the kernel will crash with:
Unable to handle kernel NULL pointer dereference at virtual address 0000000000000004 ... pc : readbw+0x8/0x10 lr : opptablefindkey+0x9c/0x174 ... Call trace: readbw+0x8/0x10 (P) opptablefindkey+0x9c/0x174 (L) findkey+0x98/0x168 devpmoppfindbwceil+0x50/0x88 ...
In order to fix the crash, create an assert function to check if the bandwidth table was created before trying to get a bandwidth with readbw().
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-2350367?
The severity of REDHAT-BUG-2350367 is classified as moderate due to potential impacts on system performance.
How do I fix REDHAT-BUG-2350367?
To fix REDHAT-BUG-2350367, ensure that your Linux kernel is updated to the latest stable version that addresses the vulnerability.
Which versions of the Linux Kernel are affected by REDHAT-BUG-2350367?
Versions of the Linux Kernel prior to the patch provided for REDHAT-BUG-2350367 are affected by this vulnerability.
What is the impact of exploiting REDHAT-BUG-2350367?
Exploiting REDHAT-BUG-2350367 could lead to erroneous bandwidth management resulting in degraded system performance.
Is there a workaround for REDHAT-BUG-2350367?
Currently, the recommended approach is to update to a patched version of the Linux Kernel to mitigate the vulnerability associated with REDHAT-BUG-2350367.