In the Linux kernel, the following vulnerability has been resolved:
tools/power turbostat: Fix offset overflow issue in index converting
The idxtooffset() function returns type int (32-bit signed), but MSRPKGENERGYSTAT is u32 and would be interpreted as a negative number. The end result is that it hits the if (offset < 0) check in updatemsrsum() which prevents the timer callback from updating the stat in the background when long durations are used. The similar issue exists in offsettoidx() and updatemsrsum(). Fix this issue by converting the 'int' to 'offt' accordingly.
[
{
"events": [
{
"introduced": "5.10.0"
},
{
"fixed": "5.10.36"
}
]
},
{
"events": [
{
"introduced": "5.11.0"
},
{
"fixed": "5.11.20"
}
]
},
{
"events": [
{
"introduced": "5.12.0"
},
{
"fixed": "5.12.3"
}
]
}
]
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-46940.json"