Riskcovery

CVE-2021-46940

tools/power turbostat: Fix offset overflow issue in index converting

State
Published
Severity
Not scored
Published
Feb 27, 2024
Updated
May 11, 2026
Reserved
Feb 25, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

tools/power turbostat: Fix offset overflow issue in index converting

The idx_to_offset() function returns type int (32-bit signed), but MSR_PKG_ENERGY_STAT is u32 and would be interpreted as a negative number. The end result is that it hits the if (offset < 0) check in update_msr_sum() which prevents the timer callback from updating the stat in the background when long durations are used. The similar issue exists in offset_to_idx() and update_msr_sum(). Fix this issue by converting the 'int' to 'off_t' accordingly.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 9972d5d84d76982606806b2ce887f70c2f8ba60a to before ea6803ff2cd1a2d7d880256bf562172b708a76ffAffected
  • 9972d5d84d76982606806b2ce887f70c2f8ba60a to before dbdf22fc825fdb1d97f23230064e0f9819471628Affected
  • 9972d5d84d76982606806b2ce887f70c2f8ba60a to before 337b1546cde87fb8588ddaedf0201b769baa572aAffected
  • 9972d5d84d76982606806b2ce887f70c2f8ba60a to before 13a779de4175df602366d129e41782ad7168cef0Affected
LinuxLinux
  • 5.10Affected
  • before 5.10Not affected
  • 5.10.36 through 5.10.*Not affected
  • 5.11.20 through 5.11.*Not affected
  • 5.12.3 through 5.12.*Not affected
  • 5.13 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.