CVE-2024-36029: mmc: sdhci-msm: pervent access to suspended controller
In the Linux kernel, the following vulnerability has been resolved:
mmc: sdhci-msm: pervent access to suspended controller
Generic sdhci code registers LED device and uses host->runtimesuspended flag to protect access to it. The sdhci-msm driver doesn't set this flag, which causes a crash when LED is accessed while controller is runtime suspended. Fix this by setting the flag correctly.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-36029?
The severity of CVE-2024-36029 is classified as high due to the potential for unauthorized access to a suspended controller.
How do I fix CVE-2024-36029?
To fix CVE-2024-36029, update to a patched version of the Linux kernel, specifically versions 6.1.123-1, 6.1.119-1, 6.12.10-1, or 6.12.11-1.
What software is affected by CVE-2024-36029?
CVE-2024-36029 affects the Linux kernel versions up to 5.10.226-1 that do not have the specific fixes implemented.
When was CVE-2024-36029 disclosed?
CVE-2024-36029 was disclosed in 2024, indicating the urgency to address the vulnerability in affected systems.
Does CVE-2024-36029 have any known exploits?
As of now, there are no public exploits documented for CVE-2024-36029, but it is recommended to apply the patch as a precaution.