CVE-2024-53067: scsi: ufs: core: Start the RTC update work later
In the Linux kernel, the following vulnerability has been resolved:
scsi: ufs: core: Start the RTC update work later
The RTC update work involves runtime resuming the UFS controller. Hence, only start the RTC update work after runtime power management in the UFS driver has been fully initialized. This patch fixes the following kernel crash:
Internal error: Oops: 0000000096000006 [#1] PREEMPT SMP Workqueue: events ufshcdrtcwork Call trace: rawspinlockirqsave+0x34/0x8c (P) pmruntimegetifactive+0x24/0x9c (L) pmruntimegetifactive+0x24/0x9c ufshcdrtcwork+0x138/0x1b4 processonework+0x148/0x288 workerthread+0x2cc/0x3d4 kthread+0x110/0x114 retfromfork+0x10/0x20
Other sources
This CVE was automatically created from a reference found in an email or other text. If you are reading this, then this CVE entry is probably erroneous, since this text should be replaced by the official CVE description automatically.
— Launchpad
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-53067?
The severity of CVE-2024-53067 is currently classified as moderate.
How do I fix CVE-2024-53067?
To fix CVE-2024-53067, update your Linux kernel to a version that includes the patch.
Which versions of the Linux kernel are affected by CVE-2024-53067?
CVE-2024-53067 affects Linux kernels version 6.8 to 6.11.8, as well as various 6.12 release candidates.
What components are involved in CVE-2024-53067?
CVE-2024-53067 involves the SCSI UFS controller and runtime power management in the UFS driver.
Is CVE-2024-53067 a local or remote vulnerability?
CVE-2024-53067 is considered a local vulnerability that requires access to the affected system to exploit.