CVE-2023-52660: media: rkisp1: Fix IRQ handling due to shared interrupts
In the Linux kernel, the following vulnerability has been resolved:
media: rkisp1: Fix IRQ handling due to shared interrupts
The driver requests the interrupts as IRQFSHARED, so the interrupt handlers can be called at any time. If such a call happens while the ISP is powered down, the SoC will hang as the driver tries to access the ISP registers.
This can be reproduced even without the platform sharing the IRQ line: Enable CONFIGDEBUGSHIRQ and unload the driver, and the board will hang.
Fix this by adding a new field, 'irqsenabled', which is used to bail out from the interrupt handler when the ISP is not operational.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2023-52660?
CVE-2023-52660 has been classified as a medium severity vulnerability due to its potential impact on system stability.
How do I fix CVE-2023-52660?
To fix CVE-2023-52660, you should update to the latest version of the Linux kernel where the vulnerability has been resolved.
What systems are affected by CVE-2023-52660?
CVE-2023-52660 affects systems running the Linux kernel with the rkisp1 driver that handles shared interrupts.
What are the potential consequences of CVE-2023-52660?
The potential consequences of CVE-2023-52660 include unexpected behavior or crashes when the ISP is powered down.
Is CVE-2023-52660 being actively exploited?
As of the latest information, there are no known active exploits for CVE-2023-52660, but it's advisable to apply the patch.