CVE-2024-57984: i3c: dw: Fix use-after-free in dw_i3c_master driver due to race condition
i3c: dw: Fix use-after-free in dwi3cmaster driver due to race condition
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.12.13-1 - Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.12.107-1Fixed in 6.12.115-2Fixed in 7.2.12-1Fixed in 7.2.15-1 - Compensating control
In dw_i3c_common_remove, cancel the dw_i3c_hj_work work before proceeding with cleanup, including i3c_master_unregister(&master->base), to prevent the work from using the freed master->base.
Event History
Frequently Asked Questions
What is the severity of CVE-2024-57984?
CVE-2024-57984 has been classified with medium severity due to the potential for a use-after-free vulnerability causing system instability.
How do I fix CVE-2024-57984?
To fix CVE-2024-57984, update your Linux kernel to the latest patched version provided by the Linux distribution.
What does CVE-2024-57984 affect?
CVE-2024-57984 affects the Linux kernel, specifically related to the dw_i3c_master driver and its handling of a race condition.
What type of vulnerability is CVE-2024-57984?
CVE-2024-57984 is classified as a use-after-free vulnerability that can lead to unexpected behavior or crashes.
Is CVE-2024-57984 easy to exploit?
Exploiting CVE-2024-57984 requires knowledge of the affected driver and conditions leading to the race condition, making it moderately complex.