CVE-2024-47666: scsi: pm80xx: Set phy->enable_completion only when we wait for it
In the Linux kernel, the following vulnerability has been resolved:
scsi: pm80xx: Set phy->enablecompletion only when we wait for it
pm8001phycontrol() populates the enablecompletion pointer with a stack address, sends a PHYLINKRESET / PHYHARDRESET, waits 300 ms, and returns. The problem arises when a phy control response comes late. After 300 ms the pm8001phycontrol() function returns and the passed enablecompletion stack address is no longer valid. Late phy control response invokes complete() on a dangling enablecompletion pointer which leads to a kernel crash.
Other sources
This CVE was automatically created from a reference found in an email or other text. If you are reading this, then this CVE entry is probably erroneous, since this text should be replaced by the official CVE description automatically.
— Launchpad
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-47666?
CVE-2024-47666 has not been explicitly assigned a severity rating, but it pertains to a vulnerability in the Linux kernel's handling of PHY_LINK_RESET and PHY_HARD_RESET.
How do I fix CVE-2024-47666?
To remediate CVE-2024-47666, update the Linux kernel to versions higher than 6.12.11-1.
Which versions of the Linux kernel are affected by CVE-2024-47666?
CVE-2024-47666 affects Linux kernel versions between 6.7 and 6.6.51, as well as certain 5.10 and 6.1 versions.
What impact does CVE-2024-47666 have on Linux systems?
CVE-2024-47666 may lead to improper handling of PHY reset operations, potentially resulting in system instability.
Is there a workaround for CVE-2024-47666 if I cannot update the kernel?
Currently, there is no known workaround for CVE-2024-47666, and updating to the fixed kernel version is the recommended action.