CVE-2024-44962: Bluetooth: btnxpuart: Shutdown timer and prevent rearming when driver unloading
In the Linux kernel, the following vulnerability has been resolved:
Bluetooth: btnxpuart: Shutdown timer and prevent rearming when driver unloading
When unload the btnxpuart driver, its associated timer will be deleted. If the timer happens to be modified at this moment, it leads to the kernel call this timer even after the driver unloaded, resulting in kernel panic. Use timershutdownsync() instead of deltimersync() to prevent rearming.
panic log: Internal error: Oops: 0000000086000007 [#1] PREEMPT SMP Modules linked in: algifhash algifskcipher afalg moal(O) mlan(O) crct10difce polyvalce polyvalgeneric sndsocimxcard sndsocfslasoccard sndsocimxaudmux mxcjpegencdec v4l2jpeg sndsocwm8962 sndsocfslmicfil sndsocfslsai flexcan sndsocfslutils ap130x rpmsgctrl imxpcmdma candev rpmsgchar pwmfan fuse [last unloaded: btnxpuart] CPU: 5 PID: 723 Comm: memtester Tainted: G O 6.6.23-lts-next-06207-g4aef2658ac28 #1 Hardware name: NXP i.MX95 19X19 board (DT) pstate: 20400009 (nzCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : 0xffff80007a2cf464 lr : calltimerfn.isra.0+0x24/0x80 ... Call trace: 0xffff80007a2cf464 runtimers+0x234/0x280 runtimersoftirq+0x20/0x40 dosoftirq+0x100/0x26c dosoftirq+0x10/0x1c callonirqstack+0x24/0x4c dosoftirqownstack+0x1c/0x2c irqexitrcu+0xc0/0xdc el0interrupt+0x54/0xd8 el0irqhandlercommon+0x18/0x24 el0t64irqhandler+0x10/0x1c el0t64irq+0x190/0x194 Code: ???????? ???????? ???????? ???????? (????????) ---[ end trace 0000000000000000 ]--- Kernel panic - not syncing: Oops: Fatal exception in interrupt SMP: stopping secondary CPUs Kernel Offset: disabled CPU features: 0x0,c0000000,40028143,1000721b Memory Limit: none ---[ end Kernel panic - not syncing: Oops: Fatal exception in interrupt ]---
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-44962?
CVE-2024-44962 is classified as a medium severity vulnerability in the Linux kernel.
How do I fix CVE-2024-44962?
To fix CVE-2024-44962, upgrade to a patched version of the Linux kernel, specifically versions 5.10.223-1, 5.10.226-1, 6.1.123-1, 6.1.119-1, or 6.12.11-1.
What types of systems are affected by CVE-2024-44962?
CVE-2024-44962 affects systems running specific versions of the Linux kernel, particularly versions prior to 6.7 and up to 6.6.46.
What component of the Linux kernel does CVE-2024-44962 impact?
CVE-2024-44962 impacts the Bluetooth btnxpuart driver within the Linux kernel.
Is there any workaround for CVE-2024-44962?
There are no recommended workarounds for CVE-2024-44962; the best action is to update to the fixed kernel versions.