Lucene search

K
ubuntucveUbuntu.comUB:CVE-2023-52645
HistoryApr 17, 2024 - 12:00 a.m.

CVE-2023-52645

2024-04-1700:00:00
ubuntu.com
ubuntu.com
10
linux
kernel
vulnerability
mediatek
pmdomain
race conditions
genpd
power domains

4.7 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

4.7 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

In the Linux kernel, the following vulnerability has been resolved:
pmdomain: mediatek: fix race conditions with genpd If the power domains are
registered first with genpd and after that the driver attempts to power
them on in the probe sequence, then it is possible that a race condition
occurs if genpd tries to power them on in the same time. The same is valid
for powering them off before unregistering them from genpd. Attempt to fix
race conditions by first removing the domains from genpd and after that
powering down domains. Also first power up the domains and after that
register them to genpd.

References

4.7 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

4.7 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%