CVE - CVE-2021-46940

CVE-ID
CVE-2021-46940	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
In the Linux kernel, the following vulnerability has been resolved: tools/power turbostat: Fix offset overflow issue in index converting The idx_to_offset() function returns type int (32-bit signed), but MSR_PKG_ENERGY_STAT is u32 and would be interpreted as a negative number. The end result is that it hits the if (offset < 0) check in update_msr_sum() which prevents the timer callback from updating the stat in the background when long durations are used. The similar issue exists in offset_to_idx() and update_msr_sum(). Fix this issue by converting the 'int' to 'off_t' accordingly.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:https://git.kernel.org/stable/c/13a779de4175df602366d129e41782ad7168cef0 URL:https://git.kernel.org/stable/c/13a779de4175df602366d129e41782ad7168cef0 MISC:https://git.kernel.org/stable/c/337b1546cde87fb8588ddaedf0201b769baa572a URL:https://git.kernel.org/stable/c/337b1546cde87fb8588ddaedf0201b769baa572a MISC:https://git.kernel.org/stable/c/dbdf22fc825fdb1d97f23230064e0f9819471628 URL:https://git.kernel.org/stable/c/dbdf22fc825fdb1d97f23230064e0f9819471628 MISC:https://git.kernel.org/stable/c/ea6803ff2cd1a2d7d880256bf562172b708a76ff URL:https://git.kernel.org/stable/c/ea6803ff2cd1a2d7d880256bf562172b708a76ff
Assigning CNA
kernel.org
Date Record Created
20240225	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20240225)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)