CVE-2024-57985: firmware: qcom: scm: Cleanup global '__scm' on probe failures
In the Linux kernel, the following vulnerability has been resolved:
firmware: qcom: scm: Cleanup global 'scm' on probe failures
If SCM driver fails the probe, it should not leave global 'scm' variable assigned, because external users of this driver will assume the probe finished successfully. For example TZMEM parts ('scm->mempool') are initialized later in the probe, but users of it (scmsmccall()) rely on the 'scm' variable.
This fixes theoretical NULL pointer exception, triggered via introducing probe deferral in SCM driver with call trace:
qcomtzmemalloc+0x70/0x1ac (P) qcomtzmemalloc+0x64/0x1ac (L) qcomscmassignmem+0x78/0x194 qcomrmtfsmemprobe+0x2d4/0x38c platformprobe+0x68/0xc8
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.12.13-1 - Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.1.176-1Fixed in 6.1.190-1Fixed in 6.12.107-1Fixed in 6.12.115-2Fixed in 7.2.12-1Fixed in 7.2.15-1
Event History
Frequently Asked Questions
What is the severity of CVE-2024-57985?
CVE-2024-57985 has been assigned a severity level that reflects its impact on the functionality of the Linux kernel.
How do I fix CVE-2024-57985?
To fix CVE-2024-57985, you should update the Linux kernel to version 6.12.13 or later.
What versions of the Linux kernel are affected by CVE-2024-57985?
CVE-2024-57985 affects Linux kernel versions between 6.11 and 6.13.2.
What is the nature of the vulnerability in CVE-2024-57985?
CVE-2024-57985 involves a probe failure in the SCM driver that improperly retains a global variable.
Is CVE-2024-57985 a remote exploit?
CVE-2024-57985 is not classified as a remote exploit; it relates to local probe failures in the kernel.