CVE-2024-56680
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
28/12/2024
Last modified:
06/10/2025
Description
In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
media: intel/ipu6: do not handle interrupts when device is disabled<br />
<br />
Some IPU6 devices have shared interrupts. We need to handle properly<br />
case when interrupt is triggered from other device on shared irq line<br />
and IPU6 itself disabled. In such case we get 0xffffffff from<br />
ISR_STATUS register and handle all irq&#39;s cases, for what we are not<br />
not prepared and usually hang the whole system.<br />
<br />
To avoid the issue use pm_runtime_get_if_active() to check if<br />
the device is enabled and prevent suspending it when we handle irq<br />
until the end of irq. Additionally use synchronize_irq() in suspend
Impact
Base Score 3.x
5.50
Severity 3.x
MEDIUM
Vulnerable products and versions
| CPE | From | Up to |
|---|---|---|
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 6.10 (including) | 6.11.11 (excluding) |
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 6.12 (including) | 6.12.2 (excluding) |
To consult the complete list of CPE names with products and versions, see this page