Lucene search

K
vulnrichmentLinuxVULNRICHMENT:CVE-2023-52645
HistoryApr 17, 2024 - 3:59 p.m.

CVE-2023-52645 pmdomain: mediatek: fix race conditions with genpd

2024-04-1715:59:21
Linux
github.com
4
linux kernel
vulnerability resolved
power domains
race conditions
mediatek
genpd

AI Score

6.7

Confidence

Low

EPSS

0

Percentile

5.1%

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial

In the Linux kernel, the following vulnerability has been resolved:

pmdomain: mediatek: fix race conditions with genpd

If the power domains are registered first with genpd and after that
the driver attempts to power them on in the probe sequence, then it is
possible that a race condition occurs if genpd tries to power them on
in the same time.
The same is valid for powering them off before unregistering them
from genpd.
Attempt to fix race conditions by first removing the domains from genpd
and after that powering down domains.
Also first power up the domains and after that register them
to genpd.

CNA Affected

[
  {
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "vendor": "Linux",
    "product": "Linux",
    "versions": [
      {
        "status": "affected",
        "version": "59b644b01cf4",
        "lessThan": "475426ad1ae0",
        "versionType": "git"
      },
      {
        "status": "affected",
        "version": "59b644b01cf4",
        "lessThan": "339ddc983bc1",
        "versionType": "git"
      },
      {
        "status": "affected",
        "version": "59b644b01cf4",
        "lessThan": "f83b9abee9fa",
        "versionType": "git"
      },
      {
        "status": "affected",
        "version": "59b644b01cf4",
        "lessThan": "3cd1d92ee1db",
        "versionType": "git"
      },
      {
        "status": "affected",
        "version": "59b644b01cf4",
        "lessThan": "c41336f4d690",
        "versionType": "git"
      }
    ],
    "programFiles": [
      "drivers/pmdomain/mediatek/mtk-pm-domains.c"
    ],
    "defaultStatus": "unaffected"
  },
  {
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "vendor": "Linux",
    "product": "Linux",
    "versions": [
      {
        "status": "affected",
        "version": "5.11"
      },
      {
        "status": "unaffected",
        "version": "0",
        "lessThan": "5.11",
        "versionType": "custom"
      },
      {
        "status": "unaffected",
        "version": "5.15.150",
        "versionType": "custom",
        "lessThanOrEqual": "5.15.*"
      },
      {
        "status": "unaffected",
        "version": "6.1.80",
        "versionType": "custom",
        "lessThanOrEqual": "6.1.*"
      },
      {
        "status": "unaffected",
        "version": "6.6.18",
        "versionType": "custom",
        "lessThanOrEqual": "6.6.*"
      },
      {
        "status": "unaffected",
        "version": "6.7.6",
        "versionType": "custom",
        "lessThanOrEqual": "6.7.*"
      },
      {
        "status": "unaffected",
        "version": "6.8",
        "versionType": "original_commit_for_fix",
        "lessThanOrEqual": "*"
      }
    ],
    "programFiles": [
      "drivers/pmdomain/mediatek/mtk-pm-domains.c"
    ],
    "defaultStatus": "affected"
  }
]

AI Score

6.7

Confidence

Low

EPSS

0

Percentile

5.1%

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial