CVE-2023-52645

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2023-52645
In the Linux kernel, the following vulnerability has been resolved: pmdomain: mediatek: fix race conditions with genpd If the power domains are registered first with genpd and *after that* the driver attempts to power them on in the probe sequence, then it is possible that a race condition occurs if genpd tries to power them on in the same time. The same is valid for powering them off before unregistering them from genpd. Attempt to fix race conditions by first removing the domains from genpd and *after that* powering down domains. Also first power up the domains and *after that* register them to genpd.

4.7 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.0 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity HIGH

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/339ddc983bc1622341d95f244c361cda3da3a4ff Patch
https://git.kernel.org/stable/c/3cd1d92ee1dbf3e8f988767eb75f26207397792b Patch
https://git.kernel.org/stable/c/475426ad1ae0bfdfd8f160ed9750903799392438 Patch
https://git.kernel.org/stable/c/c41336f4d69057cbf88fed47951379b384540df5 Patch
https://git.kernel.org/stable/c/f83b9abee9faa4868a6fac4669b86f4c215dae25 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

29 Apr 2024, 19:13

Type Values Removed Values Added
First Time Linux linux Kernel
Linux
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
CWE CWE-362
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 4.7
References () https://git.kernel.org/stable/c/339ddc983bc1622341d95f244c361cda3da3a4ff - () https://git.kernel.org/stable/c/339ddc983bc1622341d95f244c361cda3da3a4ff - Patch
References () https://git.kernel.org/stable/c/3cd1d92ee1dbf3e8f988767eb75f26207397792b - () https://git.kernel.org/stable/c/3cd1d92ee1dbf3e8f988767eb75f26207397792b - Patch
References () https://git.kernel.org/stable/c/475426ad1ae0bfdfd8f160ed9750903799392438 - () https://git.kernel.org/stable/c/475426ad1ae0bfdfd8f160ed9750903799392438 - Patch
References () https://git.kernel.org/stable/c/c41336f4d69057cbf88fed47951379b384540df5 - () https://git.kernel.org/stable/c/c41336f4d69057cbf88fed47951379b384540df5 - Patch
References () https://git.kernel.org/stable/c/f83b9abee9faa4868a6fac4669b86f4c215dae25 - () https://git.kernel.org/stable/c/f83b9abee9faa4868a6fac4669b86f4c215dae25 - Patch
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: pmdomain: mediatek: corrige las condiciones de ejecución con genpd, si los dominios de energía se registran primero con genpd y *después de eso* el controlador intenta encenderlos en la secuencia de sonda, entonces es Es posible que se produzca una condición de ejecución si genpd intenta encenderlos al mismo tiempo. Lo mismo es válido para apagarlos antes de cancelar su registro en genpd. Intente arreglar las condiciones de ejecución eliminando primero los dominios de genpd y *después* apagando los dominios. También primero encienda los dominios y *después* regístrelos en genpd.

17 Apr 2024, 16:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-04-17 16:15

Updated : 2024-04-29 19:13

NVD link : CVE-2023-52645

Mitre link : CVE-2023-52645

CVE.ORG link : CVE-2023-52645

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-362

Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')