CVE-2021-46940

Source
https://cve.org/CVERecord?id=CVE-2021-46940
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-46940.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2021-46940
Downstream
Published
2024-02-27T19:04:05.927Z
Modified
2026-03-15T22:42:41.323309Z
Severity
  • 5.5 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
Summary
[none]
Details

In the Linux kernel, the following vulnerability has been resolved:

tools/power turbostat: Fix offset overflow issue in index converting

The idxtooffset() function returns type int (32-bit signed), but MSRPKGENERGYSTAT is u32 and would be interpreted as a negative number. The end result is that it hits the if (offset < 0) check in updatemsrsum() which prevents the timer callback from updating the stat in the background when long durations are used. The similar issue exists in offsettoidx() and updatemsrsum(). Fix this issue by converting the 'int' to 'offt' accordingly.

References

Affected packages

Git /

Affected ranges

Database specific

unresolved_ranges
[
    {
        "events": [
            {
                "introduced": "5.10.0"
            },
            {
                "fixed": "5.10.36"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "5.11.0"
            },
            {
                "fixed": "5.11.20"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "5.12.0"
            },
            {
                "fixed": "5.12.3"
            }
        ]
    }
]
source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-46940.json"