CVE-2024-27002

Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
01/05/2024
Last modified:
04/11/2025

Description

In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> clk: mediatek: Do a runtime PM get on controllers during probe<br /> <br /> mt8183-mfgcfg has a mutual dependency with genpd during the probing<br /> stage, which leads to a deadlock in the following call stack:<br /> <br /> CPU0: genpd_lock --&gt; clk_prepare_lock<br /> genpd_power_off_work_fn()<br /> genpd_lock()<br /> generic_pm_domain::power_off()<br /> clk_unprepare()<br /> clk_prepare_lock()<br /> <br /> CPU1: clk_prepare_lock --&gt; genpd_lock<br /> clk_register()<br /> __clk_core_init()<br /> clk_prepare_lock()<br /> clk_pm_runtime_get()<br /> genpd_lock()<br /> <br /> Do a runtime PM get at the probe function to make sure clk_register()<br /> won&amp;#39;t acquire the genpd lock. Instead of only modifying mt8183-mfgcfg,<br /> do this on all mediatek clock controller probings because we don&amp;#39;t<br /> believe this would cause any regression.<br /> <br /> Verified on MT8183 and MT8192 Chromebooks.

Vulnerable products and versions

CPE From Up to
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 5.2 (including) 6.1.88 (excluding)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 6.2 (including) 6.6.29 (excluding)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 6.7 (including) 6.8.8 (excluding)
cpe:2.3:o:linux:linux_kernel:6.9:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.9:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.9:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.9:rc4:*:*:*:*:*:*