CVE-2024-56680: media: intel/ipu6: do not handle interrupts when device is disabled
Description
In the Linux kernel, the following vulnerability has been resolved:
media: intel/ipu6: do not handle interrupts when device is disabled
Some IPU6 devices have shared interrupts. We need to handle properly
case when interrupt is triggered from other device on shared irq line
and IPU6 itself disabled. In such case we get 0xffffffff from
ISR_STATUS register and handle all irq's cases, for what we are not
not prepared and usually hang the whole system.
To avoid the issue use pm_runtime_get_if_active() to check if
the device is enabled and prevent suspending it when we handle irq
until the end of irq. Additionally use synchronize_irq() in suspend
Classification
CVE ID: CVE-2024-56680
Affected Products
Vendor: Linux
Product: Linux
Exploit Prediction Scoring System (EPSS)
EPSS Score: 0.05% (probability of being exploited)
EPSS Percentile: 17.83% (scored less or equal to compared to others)
EPSS Date: 2025-02-04 (when was this score calculated)
References
https://git.kernel.org/stable/c/ed4524c87249edc3104f6bb28ab11325bed3d536https://git.kernel.org/stable/c/57241487a3648515c9aa6fa89e31f2414eccfdbc
https://git.kernel.org/stable/c/1429826883bb18847092b2e04c6598ef34bae1d4