usb: typec: ucsi: Move unregister out of atomic section (Linux Linux)

CVE-2024-46691
MEDIUM 5.5

En bref

Source
NVD
EPSS
EPSS 0.21 % · centile 11 ()
État
PUBLISHED
Publiée
Mise à jour
Attribuée par
Linux
Statut NVD
Modified

Description

In the Linux kernel, the following vulnerability has been resolved: usb: typec: ucsi: Move unregister out of atomic section Commit '9329933699b3 ("soc: qcom: pmic_glink: Make client-lock non-sleeping")' moved the pmic_glink client list under a spinlock, as it is accessed by the rpmsg/glink callback, which in turn is invoked from IRQ context. This means that ucsi_unregister() is now called from atomic context, which isn't feasible as it's expecting a sleepable context. An effort is under way to get GLINK to invoke its callbacks in a sleepable context, but until then lets schedule the unregistration. A side effect of this is that ucsi_unregister() can now happen after the remote processor, and thereby the communication link with it, is gone. pmic_glink_send() is amended with a check to avoid the resulting NULL pointer dereference. This does however result in the user being informed about this error by the following entry in the kernel log: ucsi_glink.pmic_glink_ucsi pmic_glink.ucsi.0: failed to send UCSI write request: -5

Faiblesses (CWE)

  • CWE-476 — Déréférencement de pointeur nul

Références

Scores

VersionScoreVecteurÉvalué par
CVSS 3.1MEDIUM 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HNVD · nvd@nist.gov (Primary)

Références européennes

Avis du CERT-FR

Configurations affectées (CPE NVD)

Produits affectés

ProduitVersions
Linux · Linuxaffected fbadcde1572f6b00e1e343d8b24ec8bf7f3ec08d < 1e3769aa0946c2b6e509c06d7a0aa9b955eaef9e ; affected 9329933699b32d467a99befa20415c4b2172389a < 095b0001aefddcd9361097c971b7debc84e72714 ; affected 9329933699b32d467a99befa20415c4b2172389a < 11bb2ffb679399f99041540cf662409905179e3a ; affected 8d62ab7d89a4906385ea8c11a4b2475578bec0f0 ; affected bd54d7c8e76d235b4a70be3a545eb13f5ac531e4 ; affected 6.6.33 < 6.6.130
Linux · Linuxaffected 6.10 ; unaffected 0 < 6.10 ; unaffected 6.6.130 ≤ 6.6.* ; unaffected 6.10.8 ≤ 6.10.* ; unaffected 6.11 ≤ *

Sources

SourceLicence
CVE List (CVEProject cvelistV5)CVE Program Terms of Use
EPSS (FIRST.org)FIRST — attribution requested
ENISA EUVDENISA — reproduction authorised, source acknowledged
CERT-FR (ANSSI)Licence Ouverte / Etalab 2.0
NVD (NIST) via fkie-cad/nvd-json-data-feedsPublic domain — this product uses data from the NVD API but is not endorsed or certified by the NVD