CVE-2024-56625: can: dev: can_set_termination(): allow sleeping GPIOs
In the Linux kernel, the following vulnerability has been resolved:
can: dev: cansettermination(): allow sleeping GPIOs
In commit 6e86a1543c37 ("can: dev: provide optional GPIO based termination support") GPIO based termination support was added.
For no particular reason that patch uses gpiodsetvalue() to set the GPIO. This leads to the following warning, if the systems uses a sleeping GPIO, i.e. behind an I2C port expander:
| WARNING: CPU: 0 PID: 379 at /drivers/gpio/gpiolib.c:3496 gpiodsetvalue+0x50/0x6c | CPU: 0 UID: 0 PID: 379 Comm: ip Not tainted 6.11.0-20241016-1 #1 823affae360cc91126e4d316d7a614a8bf86236c
Replace gpiodsetvalue() by gpiodsetvaluecansleep() to allow the use of sleeping GPIOs.
Other sources
This CVE was automatically created from a reference found in an email or other text. If you are reading this, then this CVE entry is probably erroneous, since this text should be replaced by the official CVE description automatically.
— Launchpad
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-56625?
The severity of CVE-2024-56625 is categorized as moderate.
How do I fix CVE-2024-56625?
To fix CVE-2024-56625, update the Linux Kernel to the latest stable version that includes the patch addressing this vulnerability.
Who is affected by CVE-2024-56625?
CVE-2024-56625 affects users of the Linux Kernel that utilize GPIO-based termination support.
What is the nature of the vulnerability in CVE-2024-56625?
CVE-2024-56625 involves the ability to allow sleeping GPIOs which could potentially impact system stability.
When was CVE-2024-56625 discovered?
CVE-2024-56625 was disclosed in the Linux kernel commit published on a recent stable release.