CVE-2021-36357

An issue was discovered in OpenPOWER 2.6 firmware. unpacktimestamp calls le32tocpu for endian conversion of a uint16t "year" value, resulting in a type mismatch that can truncate a higher integer value to a smaller one, and bypass a timestamp check. The fix is to use the right endian conversion...

CVE-2021-36357

The CVE-2021-36357 issue affects OpenPOWER 2.6 firmware. unpack_timestamp() uses le32_to_cpu() to endian-convert the uint16_t year, causing a type mismatch that can truncate the year value and bypass the timestamp check. The documented remediation is to apply the correct endian conversion functio...