serial: imx: fix tx statemachine deadlock (Linux Linux)
En bref
- Source
- NVD
- EPSS
- EPSS 0.18 % · centile 7 ()
- État
- PUBLISHED
- Publiée
- Mise à jour
- Attribuée par
- Linux
- Statut NVD
- Modified
Description
In the Linux kernel, the following vulnerability has been resolved: serial: imx: fix tx statemachine deadlock When using the serial port as RS485 port, the tx statemachine is used to control the RTS pin to drive the RS485 transceiver TX_EN pin. When the TTY port is closed in the middle of a transmission (for instance during userland application crash), imx_uart_shutdown disables the interface and disables the Transmission Complete interrupt. afer that, imx_uart_stop_tx bails on an incomplete transmission, to be retriggered by the TC interrupt. This interrupt is disabled and therefore the tx statemachine never transitions out of SEND. The statemachine is in deadlock now, and the TX_EN remains low, making the interface useless. imx_uart_stop_tx now checks for incomplete transmission AND whether TC interrupts are enabled before bailing to be retriggered. This makes sure the state machine handling is reached, and is properly set to WAIT_AFTER_SEND.
Faiblesses (CWE)
- CWE-667 — Improper Locking
Références
- https://git.kernel.org/stable/c/6e04a9d30509fb53ba6df5d655ed61d607a7cfda
- https://git.kernel.org/stable/c/ff168d4fdb0e1ba35fb413a749b3d6cce918ec19
- https://git.kernel.org/stable/c/63ee7be01a3f7d28b1ea8b8d7944f12bb7b0ed06
- https://git.kernel.org/stable/c/763cd68746317b5d746dc2649a3295c1efb41181
- https://git.kernel.org/stable/c/9a662d06c22ddfa371958c2071dc350436be802b
- https://git.kernel.org/stable/c/78d60dae9a0c9f09aa3d6477c94047df2fe6f7b0
- https://lists.debian.org/debian-lts-announce/2024/06/msg00016.html
Scores
| Version | Score | Vecteur | Évalué par |
|---|---|---|---|
| CVSS 3.1 | MEDIUM 5.5 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H | NVD · nvd@nist.gov (Primary) |
Références européennes
- ENISA EUVD · EUVD-2023-57081
- GCVE · GCVE-0-2023-52456
Avis du CERT-FR
- CERTFR-2024-AVI-0527 — Multiples vulnérabilités dans le noyau Linux de Debian LTS · cert.ssi.gouv.fr
- CERTFR-2024-AVI-0383 — Multiples vulnérabilités dans le noyau Linux d'Ubuntu · cert.ssi.gouv.fr
- CERTFR-2024-AVI-0333 — Multiples vulnérabilités dans le noyau Linux d'Ubuntu · cert.ssi.gouv.fr
- CERTFR-2024-AVI-0301 — Multiples vulnérabilités dans le noyau Linux d'Ubuntu · cert.ssi.gouv.fr
- CERTFR-2024-AVI-0265 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
- CERTFR-2024-AVI-0242 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
- CERTFR-2024-AVI-0226 — Multiples vulnérabilités dans le noyau Linux d'Ubuntu · cert.ssi.gouv.fr
Configurations affectées (CPE NVD)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*≥ 5.9.0 < 5.10.209cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*≥ 5.11.0 < 5.15.148cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*≥ 5.16.0 < 6.1.75cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*≥ 6.2.0 < 6.6.14cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*≥ 6.7.0 < 6.7.2
Produits affectés
| Produit | Versions |
|---|---|
| Linux · Linux | affected cb1a609236096c278ecbfb7be678a693a70283f1 < 6e04a9d30509fb53ba6df5d655ed61d607a7cfda ; affected cb1a609236096c278ecbfb7be678a693a70283f1 < ff168d4fdb0e1ba35fb413a749b3d6cce918ec19 ; affected cb1a609236096c278ecbfb7be678a693a70283f1 < 63ee7be01a3f7d28b1ea8b8d7944f12bb7b0ed06 ; affected cb1a609236096c278ecbfb7be678a693a70283f1 < 763cd68746317b5d746dc2649a3295c1efb41181 ; affected cb1a609236096c278ecbfb7be678a693a70283f1 < 9a662d06c22ddfa371958c2071dc350436be802b ; affected cb1a609236096c278ecbfb7be678a693a70283f1 < 78d60dae9a0c9f09aa3d6477c94047df2fe6f7b0 |
| Linux · Linux | affected 5.9 ; unaffected 0 < 5.9 ; unaffected 5.10.209 ≤ 5.10.* ; unaffected 5.15.148 ≤ 5.15.* ; unaffected 6.1.75 ≤ 6.1.* ; unaffected 6.6.14 ≤ 6.6.* |
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| EPSS (FIRST.org) | FIRST — attribution requested |
| ENISA EUVD | ENISA — reproduction authorised, source acknowledged |
| CERT-FR (ANSSI) | Licence Ouverte / Etalab 2.0 |
| NVD (NIST) via fkie-cad/nvd-json-data-feeds | Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD |