CVE-2024-53064: idpf: fix idpf_vc_core_init error path
In the Linux kernel, the following vulnerability has been resolved:
idpf: fix idpfvccoreinit error path
In an event where the platform running the device control plane is rebooted, reset is detected on the driver. It releases all the resources and waits for the reset to complete. Once the reset is done, it tries to build the resources back. At this time if the device control plane is not yet started, then the driver timeouts on the virtchnl message and retries to establish the mailbox again.
In the retry flow, mailbox is deinitialized but the mailbox workqueue is still alive and polling for the mailbox message. This results in accessing the released control queue leading to null-ptr-deref. Fix it by unrolling the work queue cancellation and mailbox deinitialization in the reverse order which they got initialized.
Other sources
This CVE was automatically created from a reference found in an email or other text. If you are reading this, then this CVE entry is probably erroneous, since this text should be replaced by the official CVE description automatically.
— Launchpad
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-53064?
CVE-2024-53064 has not been assigned a severity rating yet by NVD but it is related to resource management vulnerabilities in the Linux kernel.
How do I fix CVE-2024-53064?
To fix CVE-2024-53064, update the Linux kernel to version 6.12 or higher, or ensure that you are using a patched release.
Which systems are affected by CVE-2024-53064?
CVE-2024-53064 affects Linux kernel versions from 6.7 up to 6.11.8 and includes versions 6.12 release candidates.
Is CVE-2024-53064 being actively exploited?
There is currently no public information indicating that CVE-2024-53064 is being actively exploited in the wild.
What kind of impact does CVE-2024-53064 have on systems?
CVE-2024-53064 could potentially lead to resource leaks if the driver does not correctly handle reset events.