CVE-2024-42153: i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
i2c: pnx: Fix potential deadlock warning from deltimersync() call in isr
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.223-1Fixed in 5.10.234-1Fixed in 6.1.129-1Fixed in 6.1.135-1Fixed in 6.12.25-1Fixed in 6.12.27-1 - Upgrade
Upgrade
debian/linux-6.1to a version that resolves this vulnerability.Fixed in 6.1.129-1~deb11u1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 5.15.164.1-1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 6.6.43.1-7 - Configuration
In i2c pnx code, replace the del_timer_sync() usage from interrupt context with wait_for_completion_timeout() so the problematic timer and its related functions can be removed.
Linux kernel (i2c: pnx) Timer/interrupt-context wait mechanism = Use wait_for_completion_timeout() instead of wait_for_completion() with del_timer_sync() in ISR
Event History
Frequently Asked Questions
What is the severity of CVE-2024-42153?
CVE-2024-42153 has a medium severity rating due to the potential for deadlock during specific function calls in the Linux kernel.
How do I fix CVE-2024-42153?
To mitigate CVE-2024-42153, upgrade to the corrected versions of the Linux kernel, which include patches for this vulnerability.
Which versions of the Linux kernel are affected by CVE-2024-42153?
CVE-2024-42153 affects Linux kernel versions from 2.6.20 up to and including 6.10-rc6.
Is CVE-2024-42153 a remote vulnerability?
CVE-2024-42153 is not a remote vulnerability; it affects the kernel's behavior in interrupt context.
What can happen if CVE-2024-42153 is exploited?
If CVE-2024-42153 is exploited, it could lead to system instability or freezing due to potential deadlock.