CVE-2024-56671: gpio: graniterapids: Fix vGPIO driver crash
In the Linux kernel, the following vulnerability has been resolved:
gpio: graniterapids: Fix vGPIO driver crash
Move setting irqchip.name from probe() function to the initialization of "irqchip" struct in order to fix vGPIO driver crash during bootup.
Crash was caused by unauthorized modification of irqchip.name field where irqchip struct was initialized as const.
This behavior is a consequence of suboptimal implementation of gpioirqchipsetchip(), which should be changed to avoid casting away const qualifier.
Crash log: BUG: unable to handle page fault for address: ffffffffc0ba81c0 /#PF: supervisor write access in kernel mode /#PF: errorcode(0x0003) - permissions violation CPU: 33 UID: 0 PID: 1075 Comm: systemd-udevd Not tainted 6.12.0-rc6-00077-g2e1b3cc9d7f7 #1 Hardware name: Intel Corporation Kaseyville RP/Kaseyville RP, BIOS KVLDCRB1.PGS.0026.D73.2410081258 10/08/2024 RIP: 0010:gnrgpioprobe+0x171/0x220 [gpiograniterapids]
Other sources
This CVE was automatically created from a reference found in an email or other text. If you are reading this, then this CVE entry is probably erroneous, since this text should be replaced by the official CVE description automatically.
— Launchpad
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-56671?
CVE-2024-56671 has been classified as a medium severity vulnerability due to the potential for system crashes.
Which versions of the Linux kernel are affected by CVE-2024-56671?
CVE-2024-56671 affects Linux kernel versions from 6.10 up to 6.12.6 and specific release candidates 6.13-rc1 and 6.13-rc2.
How do I fix CVE-2024-56671?
To fix CVE-2024-56671, update the Linux kernel to a patched version beyond 6.12.6 or apply relevant security patches.
What causes the crash in CVE-2024-56671?
The crash in CVE-2024-56671 is caused by improper initialization of the irq_chip struct in the vGPIO driver.
Is there a workaround for CVE-2024-56671?
There is no known workaround for CVE-2024-56671; updating to a secure kernel version is recommended.