Deskripsi CVE

In the Linux kernel, the following vulnerability has been resolved: pstore/ram: Fix crash when setting number of cpus to an odd number When the number of cpu cores is adjusted to 7 or other odd numbers, the zone size will become an odd number. The address of the zone will become: addr of zone0 = BASE addr of zone1 = BASE + zone_size addr of zone2 = BASE + zone_size*2 ... The address of zone1/3/5/7 will be mapped to non-alignment va. Eventually crashes will occur when accessing these va. So, use ALIGN_DOWN() to make sure the zone size is even to avoid this bug.

Informasi CVE

EPSS

EPSS adalah model penilaian yang memprediksi kemungkinan suatu kerentanan dieksploitasi.

Skor EPSS

Model EPSS menghasilkan skor probabilitas antara 0 dan 1 (0 hingga 100%). Semakin tinggi skor, semakin besar probabilitas bahwa suatu kerentanan akan dieksploitasi.

Persentil EPSS

Persentil digunakan untuk meranking CVE berdasarkan skor EPSS mereka. Misalnya, CVE di persentil ke-95 berdasarkan skor EPSS-nya lebih mungkin dieksploitasi daripada 95% CVE lainnya. Dengan demikian, persentil digunakan untuk membandingkan skor EPSS suatu CVE dengan CVE lainnya.

EPSS First.org

Referensi

https://git.kernel.org/stable/c/0593cfd321df9001142a9d2c58d4144917dff7ee

https://git.kernel.org/stable/c/2a37905d47bffec61e95d99f0c1cc5dc6377956c

https://git.kernel.org/stable/c/75b0f71b26b3ad833c5c0670109c0af6e021e86a

https://git.kernel.org/stable/c/8b69c30f4e8b69131d92096cb296dc1f217101e4

https://git.kernel.org/stable/c/a63e48cd835c34c38ef671d344cc029b1ea5bf10

https://git.kernel.org/stable/c/cd40e43f870cf21726b22487a95ed223790b3542

https://git.kernel.org/stable/c/d49270a04623ce3c0afddbf3e984cb245aa48e9c

https://git.kernel.org/stable/c/e9f6ac50890104fdf8194f2865680689239d30fb