CVE-2023-52882: clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
In the Linux kernel, the following vulnerability has been resolved:
clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
While PLL CPUX clock rate change when CPU is running from it works in vast majority of cases, now and then it causes instability. This leads to system crashes and other undefined behaviour. After a lot of testing (30+ hours) while also doing a lot of frequency switches, we can't observe any instability issues anymore when doing reparenting to stable clock like 24 MHz oscillator.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.223-1Fixed in 5.10.234-1Fixed in 6.1.129-1Fixed in 6.1.135-1Fixed in 6.12.25-1Fixed in 6.12.27-1 - Configuration
Reparent CPUX to the stable 24 MHz oscillator while changing the PLL CPUX clock rate to prevent instability, crashes, and undefined behavior.
Linux kernel sunxi-ng H6 CPUX clock CPUX clock parent during PLL CPUX rate change = 24 MHz oscillator
Event History
Frequently Asked Questions
What is the severity of CVE-2023-52882?
CVE-2023-52882 has been classified with a medium severity due to potential system instability during CPUX clock rate changes.
How do I fix CVE-2023-52882?
To fix CVE-2023-52882, update your Linux kernel to one of the patched versions: 5.10.223-1, 5.10.226-1, 6.1.119-1, 6.1.123-1, 6.12.10-1, or 6.12.11-1.
What is affected by CVE-2023-52882?
CVE-2023-52882 affects various distributions of the Linux kernel that are using CPUX during PLL clock rate changes.
What are the consequences of CVE-2023-52882 if not addressed?
If CVE-2023-52882 is not addressed, it may lead to system instability and unpredictable behavior under certain conditions.
When was CVE-2023-52882 disclosed?
CVE-2023-52882 was disclosed with an official fix provided in the Linux kernel in 2023.