CVE-2024-56671
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
27/12/2024
Last modified:
06/01/2025
Description
In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
gpio: graniterapids: Fix vGPIO driver crash<br />
<br />
Move setting irq_chip.name from probe() function to the initialization<br />
of "irq_chip" struct in order to fix vGPIO driver crash during bootup.<br />
<br />
Crash was caused by unauthorized modification of irq_chip.name field<br />
where irq_chip struct was initialized as const.<br />
<br />
This behavior is a consequence of suboptimal implementation of<br />
gpio_irq_chip_set_chip(), which should be changed to avoid<br />
casting away const qualifier.<br />
<br />
Crash log:<br />
BUG: unable to handle page fault for address: ffffffffc0ba81c0<br />
/#PF: supervisor write access in kernel mode<br />
/#PF: error_code(0x0003) - permissions violation<br />
CPU: 33 UID: 0 PID: 1075 Comm: systemd-udevd Not tainted 6.12.0-rc6-00077-g2e1b3cc9d7f7 #1<br />
Hardware name: Intel Corporation Kaseyville RP/Kaseyville RP, BIOS KVLDCRB1.PGS.0026.D73.2410081258 10/08/2024<br />
RIP: 0010:gnr_gpio_probe+0x171/0x220 [gpio_graniterapids]
Impact
Base Score 3.x
5.50
Severity 3.x
MEDIUM
Vulnerable products and versions
CPE | From | Up to |
---|---|---|
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 6.10 (including) | 6.12.6 (excluding) |
cpe:2.3:o:linux:linux_kernel:6.13:rc1:*:*:*:*:*:* | ||
cpe:2.3:o:linux:linux_kernel:6.13:rc2:*:*:*:*:*:* |
To consult the complete list of CPE names with products and versions, see this page