CVE-2024-56723

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-56723
In the Linux kernel, the following vulnerability has been resolved: mfd: intel_soc_pmic_bxtwc: Use IRQ domain for PMIC devices While design wise the idea of converting the driver to use the hierarchy of the IRQ chips is correct, the implementation has (inherited) flaws. This was unveiled when platform_get_irq() had started WARN() on IRQ 0 that is supposed to be a Linux IRQ number (also known as vIRQ). Rework the driver to respect IRQ domain when creating each MFD device separately, as the domain is not the same for all of them.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/0350d783ab888cb1cb48ced36cc28b372723f1a4 Patch
https://git.kernel.org/stable/c/61d590d7076b50b6ebdea1f3b83bb041c01fc482 Patch
https://git.kernel.org/stable/c/6ea17c03edc7ed0aabb1431eb26e2f94849af68a Patch
https://git.kernel.org/stable/c/7ba45b8bc62e64da524d45532107ae93eb33c93c Patch
https://git.kernel.org/stable/c/897713c9d24f6ec394585abfcf259a6e5cad22c8 Patch
https://git.kernel.org/stable/c/b3d45c19bcffb9a9a821df759f60be39d88c19f4 Patch
https://git.kernel.org/stable/c/bb6642d4b3136359b5b620049f76515876e6127e Patch
https://git.kernel.org/stable/c/d4cc78bd6a25accb7ae2ac9fc445d1e1deda4a62 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

09 Jan 2025, 20:25

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
References () https://git.kernel.org/stable/c/0350d783ab888cb1cb48ced36cc28b372723f1a4 - () https://git.kernel.org/stable/c/0350d783ab888cb1cb48ced36cc28b372723f1a4 - Patch
References () https://git.kernel.org/stable/c/61d590d7076b50b6ebdea1f3b83bb041c01fc482 - () https://git.kernel.org/stable/c/61d590d7076b50b6ebdea1f3b83bb041c01fc482 - Patch
References () https://git.kernel.org/stable/c/6ea17c03edc7ed0aabb1431eb26e2f94849af68a - () https://git.kernel.org/stable/c/6ea17c03edc7ed0aabb1431eb26e2f94849af68a - Patch
References () https://git.kernel.org/stable/c/7ba45b8bc62e64da524d45532107ae93eb33c93c - () https://git.kernel.org/stable/c/7ba45b8bc62e64da524d45532107ae93eb33c93c - Patch
References () https://git.kernel.org/stable/c/897713c9d24f6ec394585abfcf259a6e5cad22c8 - () https://git.kernel.org/stable/c/897713c9d24f6ec394585abfcf259a6e5cad22c8 - Patch
References () https://git.kernel.org/stable/c/b3d45c19bcffb9a9a821df759f60be39d88c19f4 - () https://git.kernel.org/stable/c/b3d45c19bcffb9a9a821df759f60be39d88c19f4 - Patch
References () https://git.kernel.org/stable/c/bb6642d4b3136359b5b620049f76515876e6127e - () https://git.kernel.org/stable/c/bb6642d4b3136359b5b620049f76515876e6127e - Patch
References () https://git.kernel.org/stable/c/d4cc78bd6a25accb7ae2ac9fc445d1e1deda4a62 - () https://git.kernel.org/stable/c/d4cc78bd6a25accb7ae2ac9fc445d1e1deda4a62 - Patch
CWE NVD-CWE-noinfo
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: mfd: intel_soc_pmic_bxtwc: Utilizar dominio IRQ para dispositivos PMIC Si bien en cuanto al diseño la idea de convertir el controlador para utilizar la jerarquía de los chips IRQ es correcta, la implementación tiene fallas (heredadas). Esto se reveló cuando platform_get_irq() había iniciado WARN() en IRQ 0 que se supone que es un número IRQ de Linux (también conocido como vIRQ). Reelabore el controlador para respetar el dominio IRQ al crear cada dispositivo MFD por separado, ya que el dominio no es el mismo para todos ellos.
First Time Linux
Linux linux Kernel

29 Dec 2024, 12:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-12-29 12:15

Updated : 2025-01-09 20:25

NVD link : CVE-2024-56723

Mitre link : CVE-2024-56723

CVE.ORG link : CVE-2024-56723

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
NVD-CWE-noinfo