First published: Sun Dec 29 2024(Updated: )
In the Linux kernel, the following vulnerability has been resolved: mfd: intel_soc_pmic_bxtwc: Use IRQ domain for PMIC devices While design wise the idea of converting the driver to use the hierarchy of the IRQ chips is correct, the implementation has (inherited) flaws. This was unveiled when platform_get_irq() had started WARN() on IRQ 0 that is supposed to be a Linux IRQ number (also known as vIRQ). Rework the driver to respect IRQ domain when creating each MFD device separately, as the domain is not the same for all of them.
Credit: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Affected Software | Affected Version | How to fix |
---|---|---|
Linux Kernel | >=4.13<5.4.287 | |
Linux Kernel | >=5.5<5.10.231 | |
Linux Kernel | >=5.11<5.15.174 | |
Linux Kernel | >=5.16<6.1.120 | |
Linux Kernel | >=6.2<6.6.64 | |
Linux Kernel | >=6.7<6.11.11 | |
Linux Kernel | >=6.12<6.12.2 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2024-56723 has a medium severity level according to the Common Vulnerability Scoring System.
To mitigate CVE-2024-56723, update the Linux kernel to a version that addresses the identified flaws.
CVE-2024-56723 affects Linux kernel versions between 4.13 and 6.12.2.
CVE-2024-56723 addresses flaws in the implementation of the IRQ domain for PMIC devices in the Linux kernel.
Yes, CVE-2024-56723 has been resolved in the latest updates of the Linux kernel.