CVE-2024-46846

Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
27/09/2024
Last modified:
03/11/2025

Description

In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> spi: rockchip: Resolve unbalanced runtime PM / system PM handling<br /> <br /> Commit e882575efc77 ("spi: rockchip: Suspend and resume the bus during<br /> NOIRQ_SYSTEM_SLEEP_PM ops") stopped respecting runtime PM status and<br /> simply disabled clocks unconditionally when suspending the system. This<br /> causes problems when the device is already runtime suspended when we go<br /> to sleep -- in which case we double-disable clocks and produce a<br /> WARNing.<br /> <br /> Switch back to pm_runtime_force_{suspend,resume}(), because that still<br /> seems like the right thing to do, and the aforementioned commit makes no<br /> explanation why it stopped using it.<br /> <br /> Also, refactor some of the resume() error handling, because it&amp;#39;s not<br /> actually a good idea to re-disable clocks on failure.

Vulnerable products and versions

CPE From Up to
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 5.18 (including) 6.1.110 (excluding)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 6.2 (including) 6.6.51 (excluding)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 6.7 (including) 6.10.10 (excluding)
cpe:2.3:o:linux:linux_kernel:6.11:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.11:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.11:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.11:rc4:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.11:rc5:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.11:rc6:*:*:*:*:*:*