| lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
|
Open Source and information security mailing list archives
| ||
|
Message-ID: <2024122833-CVE-2024-56683-14c3@gregkh> Date: Sat, 28 Dec 2024 10:45:35 +0100 From: Greg Kroah-Hartman <gregkh@...uxfoundation.org> To: linux-cve-announce@...r.kernel.org Cc: Greg Kroah-Hartman <gregkh@...uxfoundation.org> Subject: CVE-2024-56683: drm/vc4: hdmi: Avoid hang with debug registers when suspended Description =========== In the Linux kernel, the following vulnerability has been resolved: drm/vc4: hdmi: Avoid hang with debug registers when suspended Trying to read /sys/kernel/debug/dri/1/hdmi1_regs when the hdmi is disconnected results in a fatal system hang. This is due to the pm suspend code disabling the dvp clock. That is just a gate of the 108MHz clock in DVP_HT_RPI_MISC_CONFIG, which results in accesses hanging AXI bus. Protect against this. The Linux kernel CVE team has assigned CVE-2024-56683 to this issue. Affected and fixed versions =========================== Issue introduced in 6.0 with commit 25eb441d55d479581a65bcc9de88bc1d86bf76c1 and fixed in 6.1.120 with commit 0ea29bd7d9400d3629683244d609358ed1b12075 Issue introduced in 6.0 with commit 25eb441d55d479581a65bcc9de88bc1d86bf76c1 and fixed in 6.6.64 with commit c7d474974954d9af7e0092021223d58f2de128df Issue introduced in 6.0 with commit 25eb441d55d479581a65bcc9de88bc1d86bf76c1 and fixed in 6.11.11 with commit 16f351adf733a182224ad24916d7673aa6df02df Issue introduced in 6.0 with commit 25eb441d55d479581a65bcc9de88bc1d86bf76c1 and fixed in 6.12.2 with commit 74f21be9990a42dc2357bcf87a13e16c6998b90e Issue introduced in 6.0 with commit 25eb441d55d479581a65bcc9de88bc1d86bf76c1 and fixed in 6.13-rc1 with commit 223ee2567a55e4f80315c768d2969e6a3b9fb23d Issue introduced in 5.18.18 with commit 1da00a63f0e798f0fd0dcf623b16c16e13f93615 Issue introduced in 5.19.2 with commit f70c25cf34f91cc6f40e79a5b7565fd0272d7396 Please see https://www.kernel.org for a full list of currently supported kernel versions by the kernel community. Unaffected versions might change over time as fixes are backported to older supported kernel versions. The official CVE entry at https://cve.org/CVERecord/?id=CVE-2024-56683 will be updated if fixes are backported, please check that for the most up to date information about this issue. Affected files ============== The file(s) affected by this issue are: drivers/gpu/drm/vc4/vc4_hdmi.c Mitigation ========== The Linux kernel CVE team recommends that you update to the latest stable kernel version for this, and many other bugfixes. Individual changes are never tested alone, but rather are part of a larger kernel release. Cherry-picking individual commits is not recommended or supported by the Linux kernel community at all. If however, updating to the latest release is impossible, the individual changes to resolve this issue can be found at these commits: https://git.kernel.org/stable/c/0ea29bd7d9400d3629683244d609358ed1b12075 https://git.kernel.org/stable/c/c7d474974954d9af7e0092021223d58f2de128df https://git.kernel.org/stable/c/16f351adf733a182224ad24916d7673aa6df02df https://git.kernel.org/stable/c/74f21be9990a42dc2357bcf87a13e16c6998b90e https://git.kernel.org/stable/c/223ee2567a55e4f80315c768d2969e6a3b9fb23d
Powered by blists - more mailing lists