cve-2024-56723
Vulnerability from cvelistv5
Published
2024-12-29 11:30
Modified
2025-01-20 06:26
Severity ?
Summary
In the Linux kernel, the following vulnerability has been resolved: mfd: intel_soc_pmic_bxtwc: Use IRQ domain for PMIC devices While design wise the idea of converting the driver to use the hierarchy of the IRQ chips is correct, the implementation has (inherited) flaws. This was unveiled when platform_get_irq() had started WARN() on IRQ 0 that is supposed to be a Linux IRQ number (also known as vIRQ). Rework the driver to respect IRQ domain when creating each MFD device separately, as the domain is not the same for all of them.
References
416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/0350d783ab888cb1cb48ced36cc28b372723f1a4Patch
416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/61d590d7076b50b6ebdea1f3b83bb041c01fc482Patch
416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/6ea17c03edc7ed0aabb1431eb26e2f94849af68aPatch
416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/7ba45b8bc62e64da524d45532107ae93eb33c93cPatch
416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/897713c9d24f6ec394585abfcf259a6e5cad22c8Patch
416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/b3d45c19bcffb9a9a821df759f60be39d88c19f4Patch
416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/bb6642d4b3136359b5b620049f76515876e6127ePatch
416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/d4cc78bd6a25accb7ae2ac9fc445d1e1deda4a62Patch
Impacted products
Vendor Product Version
Linux Linux Version: 57129044f5044dcd73c22d91491906104bd331fd
Version: 57129044f5044dcd73c22d91491906104bd331fd
Version: 57129044f5044dcd73c22d91491906104bd331fd
Version: 57129044f5044dcd73c22d91491906104bd331fd
Version: 57129044f5044dcd73c22d91491906104bd331fd
Version: 57129044f5044dcd73c22d91491906104bd331fd
Version: 57129044f5044dcd73c22d91491906104bd331fd
Version: 57129044f5044dcd73c22d91491906104bd331fd
 Create a notification for this product.
   Linux Linux Version: 4.13
 Create a notification for this product.
Show details on NVD website

To clipboard 

{
   containers: {
      cna: {
         affected: [
            {
               defaultStatus: "unaffected",
               product: "Linux",
               programFiles: [
                  "drivers/mfd/intel_soc_pmic_bxtwc.c",
               ],
               repo: "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
               vendor: "Linux",
               versions: [
                  {
                     lessThan: "6ea17c03edc7ed0aabb1431eb26e2f94849af68a",
                     status: "affected",
                     version: "57129044f5044dcd73c22d91491906104bd331fd",
                     versionType: "git",
                  },
                  {
                     lessThan: "61d590d7076b50b6ebdea1f3b83bb041c01fc482",
                     status: "affected",
                     version: "57129044f5044dcd73c22d91491906104bd331fd",
                     versionType: "git",
                  },
                  {
                     lessThan: "bb6642d4b3136359b5b620049f76515876e6127e",
                     status: "affected",
                     version: "57129044f5044dcd73c22d91491906104bd331fd",
                     versionType: "git",
                  },
                  {
                     lessThan: "7ba45b8bc62e64da524d45532107ae93eb33c93c",
                     status: "affected",
                     version: "57129044f5044dcd73c22d91491906104bd331fd",
                     versionType: "git",
                  },
                  {
                     lessThan: "d4cc78bd6a25accb7ae2ac9fc445d1e1deda4a62",
                     status: "affected",
                     version: "57129044f5044dcd73c22d91491906104bd331fd",
                     versionType: "git",
                  },
                  {
                     lessThan: "897713c9d24f6ec394585abfcf259a6e5cad22c8",
                     status: "affected",
                     version: "57129044f5044dcd73c22d91491906104bd331fd",
                     versionType: "git",
                  },
                  {
                     lessThan: "b3d45c19bcffb9a9a821df759f60be39d88c19f4",
                     status: "affected",
                     version: "57129044f5044dcd73c22d91491906104bd331fd",
                     versionType: "git",
                  },
                  {
                     lessThan: "0350d783ab888cb1cb48ced36cc28b372723f1a4",
                     status: "affected",
                     version: "57129044f5044dcd73c22d91491906104bd331fd",
                     versionType: "git",
                  },
               ],
            },
            {
               defaultStatus: "affected",
               product: "Linux",
               programFiles: [
                  "drivers/mfd/intel_soc_pmic_bxtwc.c",
               ],
               repo: "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
               vendor: "Linux",
               versions: [
                  {
                     status: "affected",
                     version: "4.13",
                  },
                  {
                     lessThan: "4.13",
                     status: "unaffected",
                     version: "0",
                     versionType: "semver",
                  },
                  {
                     lessThanOrEqual: "5.4.*",
                     status: "unaffected",
                     version: "5.4.287",
                     versionType: "semver",
                  },
                  {
                     lessThanOrEqual: "5.10.*",
                     status: "unaffected",
                     version: "5.10.231",
                     versionType: "semver",
                  },
                  {
                     lessThanOrEqual: "5.15.*",
                     status: "unaffected",
                     version: "5.15.174",
                     versionType: "semver",
                  },
                  {
                     lessThanOrEqual: "6.1.*",
                     status: "unaffected",
                     version: "6.1.120",
                     versionType: "semver",
                  },
                  {
                     lessThanOrEqual: "6.6.*",
                     status: "unaffected",
                     version: "6.6.64",
                     versionType: "semver",
                  },
                  {
                     lessThanOrEqual: "6.11.*",
                     status: "unaffected",
                     version: "6.11.11",
                     versionType: "semver",
                  },
                  {
                     lessThanOrEqual: "6.12.*",
                     status: "unaffected",
                     version: "6.12.2",
                     versionType: "semver",
                  },
                  {
                     lessThanOrEqual: "*",
                     status: "unaffected",
                     version: "6.13",
                     versionType: "original_commit_for_fix",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "In the Linux kernel, the following vulnerability has been resolved:\n\nmfd: intel_soc_pmic_bxtwc: Use IRQ domain for PMIC devices\n\nWhile design wise the idea of converting the driver to use\nthe hierarchy of the IRQ chips is correct, the implementation\nhas (inherited) flaws. This was unveiled when platform_get_irq()\nhad started WARN() on IRQ 0 that is supposed to be a Linux\nIRQ number (also known as vIRQ).\n\nRework the driver to respect IRQ domain when creating each MFD\ndevice separately, as the domain is not the same for all of them.",
            },
         ],
         providerMetadata: {
            dateUpdated: "2025-01-20T06:26:54.659Z",
            orgId: "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            shortName: "Linux",
         },
         references: [
            {
               url: "https://git.kernel.org/stable/c/6ea17c03edc7ed0aabb1431eb26e2f94849af68a",
            },
            {
               url: "https://git.kernel.org/stable/c/61d590d7076b50b6ebdea1f3b83bb041c01fc482",
            },
            {
               url: "https://git.kernel.org/stable/c/bb6642d4b3136359b5b620049f76515876e6127e",
            },
            {
               url: "https://git.kernel.org/stable/c/7ba45b8bc62e64da524d45532107ae93eb33c93c",
            },
            {
               url: "https://git.kernel.org/stable/c/d4cc78bd6a25accb7ae2ac9fc445d1e1deda4a62",
            },
            {
               url: "https://git.kernel.org/stable/c/897713c9d24f6ec394585abfcf259a6e5cad22c8",
            },
            {
               url: "https://git.kernel.org/stable/c/b3d45c19bcffb9a9a821df759f60be39d88c19f4",
            },
            {
               url: "https://git.kernel.org/stable/c/0350d783ab888cb1cb48ced36cc28b372723f1a4",
            },
         ],
         title: "mfd: intel_soc_pmic_bxtwc: Use IRQ domain for PMIC devices",
         x_generator: {
            engine: "bippy-5f407fcff5a0",
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      assignerShortName: "Linux",
      cveId: "CVE-2024-56723",
      datePublished: "2024-12-29T11:30:00.812Z",
      dateReserved: "2024-12-27T15:00:39.858Z",
      dateUpdated: "2025-01-20T06:26:54.659Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
   "vulnerability-lookup:meta": {
      nvd: "{\"cve\":{\"id\":\"CVE-2024-56723\",\"sourceIdentifier\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"published\":\"2024-12-29T12:15:06.390\",\"lastModified\":\"2025-01-09T20:25:59.000\",\"vulnStatus\":\"Analyzed\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"In the Linux kernel, the following vulnerability has been resolved:\\n\\nmfd: intel_soc_pmic_bxtwc: Use IRQ domain for PMIC devices\\n\\nWhile design wise the idea of converting the driver to use\\nthe hierarchy of the IRQ chips is correct, the implementation\\nhas (inherited) flaws. This was unveiled when platform_get_irq()\\nhad started WARN() on IRQ 0 that is supposed to be a Linux\\nIRQ number (also known as vIRQ).\\n\\nRework the driver to respect IRQ domain when creating each MFD\\ndevice separately, as the domain is not the same for all of them.\"},{\"lang\":\"es\",\"value\":\"En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: mfd: intel_soc_pmic_bxtwc: Utilizar dominio IRQ para dispositivos PMIC Si bien en cuanto al diseño la idea de convertir el controlador para utilizar la jerarquía de los chips IRQ es correcta, la implementación tiene fallas (heredadas). Esto se reveló cuando platform_get_irq() había iniciado WARN() en IRQ 0 que se supone que es un número IRQ de Linux (también conocido como vIRQ). Reelabore el controlador para respetar el dominio IRQ al crear cada dispositivo MFD por separado, ya que el dominio no es el mismo para todos ellos.\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H\",\"baseScore\":5.5,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.8,\"impactScore\":3.6}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"NVD-CWE-noinfo\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"4.13\",\"versionEndExcluding\":\"5.4.287\",\"matchCriteriaId\":\"B3FC0E85-A276-4943-A145-65EB84DFBC0E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.5\",\"versionEndExcluding\":\"5.10.231\",\"matchCriteriaId\":\"B5C644CC-2BD7-4E32-BC54-8DCC7ABE9935\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.11\",\"versionEndExcluding\":\"5.15.174\",\"matchCriteriaId\":\"419FD073-1517-4FD5-8158-F94BC68A1E89\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.16\",\"versionEndExcluding\":\"6.1.120\",\"matchCriteriaId\":\"09AC6122-E2A4-40FE-9D33-268A1B2EC265\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.2\",\"versionEndExcluding\":\"6.6.64\",\"matchCriteriaId\":\"CA16DEE3-ABEC-4449-9F4A-7A3DC4FC36C7\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.7\",\"versionEndExcluding\":\"6.11.11\",\"matchCriteriaId\":\"21434379-192D-472F-9B54-D45E3650E893\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.12\",\"versionEndExcluding\":\"6.12.2\",\"matchCriteriaId\":\"D8882B1B-2ABC-4838-AC1D-DBDBB5764776\"}]}]}],\"references\":[{\"url\":\"https://git.kernel.org/stable/c/0350d783ab888cb1cb48ced36cc28b372723f1a4\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/61d590d7076b50b6ebdea1f3b83bb041c01fc482\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/6ea17c03edc7ed0aabb1431eb26e2f94849af68a\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/7ba45b8bc62e64da524d45532107ae93eb33c93c\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/897713c9d24f6ec394585abfcf259a6e5cad22c8\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/b3d45c19bcffb9a9a821df759f60be39d88c19f4\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/bb6642d4b3136359b5b620049f76515876e6127e\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/d4cc78bd6a25accb7ae2ac9fc445d1e1deda4a62\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]}]}}",
   },
}


Log in or create an account to share your comment.

Security Advisory comment format.

This schema specifies the format of a comment related to a security advisory.

UUIDv4 of the comment
UUIDv4 of the Vulnerability-Lookup instance
When the comment was created originally
When the comment was last updated
Title of the comment
Description of the comment
The identifier of the vulnerability (CVE ID, GHSA-ID, PYSEC ID, etc.).



Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
  • Confirmed: The vulnerability is confirmed from an analyst perspective.
  • Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
  • Patched: This vulnerability was successfully patched by the user reporting the sighting.
  • Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
  • Not confirmed: The user expresses doubt about the veracity of the vulnerability.
  • Not patched: This vulnerability was not successfully patched by the user reporting the sighting.