CVE-2024-26999

Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
01/05/2024
Last modified:
04/11/2025

Description

In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> serial/pmac_zilog: Remove flawed mitigation for rx irq flood<br /> <br /> The mitigation was intended to stop the irq completely. That may be<br /> better than a hard lock-up but it turns out that you get a crash anyway<br /> if you&amp;#39;re using pmac_zilog as a serial console:<br /> <br /> ttyPZ0: pmz: rx irq flood !<br /> BUG: spinlock recursion on CPU#0, swapper/0<br /> <br /> That&amp;#39;s because the pr_err() call in pmz_receive_chars() results in<br /> pmz_console_write() attempting to lock a spinlock already locked in<br /> pmz_interrupt(). With CONFIG_DEBUG_SPINLOCK=y, this produces a fatal<br /> BUG splat. The spinlock in question is the one in struct uart_port.<br /> <br /> Even when it&amp;#39;s not fatal, the serial port rx function ceases to work.<br /> Also, the iteration limit doesn&amp;#39;t play nicely with QEMU, as can be<br /> seen in the bug report linked below.<br /> <br /> A web search for other reports of the error message "pmz: rx irq flood"<br /> didn&amp;#39;t produce anything. So I don&amp;#39;t think this code is needed any more.<br /> Remove it.

Vulnerable products and versions

CPE From Up to
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 2.6.12 (including) 5.15.157 (excluding)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 5.16 (including) 6.1.88 (excluding)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 6.2 (including) 6.6.29 (excluding)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 6.7 (including) 6.8.8 (excluding)
cpe:2.3:o:linux:linux_kernel:6.9:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.9:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.9:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.9:rc4:*:*:*:*:*:*
cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*


References to Advisories, Solutions, and Tools