CVE-2023-52882

Summary

In the Linux kernel, the following vulnerability has been resolved:

clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change

While PLL CPUX clock rate change when CPU is running from it works in vast majority of cases, now and then it causes instability. This leads to system crashes and other undefined behaviour. After a lot of testing (30+ hours) while also doing a lot of frequency switches, we can't observe any instability issues anymore when doing reparenting to stable clock like 24 MHz oscillator.

Affected Software

VendorProductVersion RangeStatus
LinuxLinux524353ea480b0094c16f2b5684ce7e0a23ab3685 < fe11826ffa200e1a7a826e745163cb2f47875f66affected
LinuxLinux524353ea480b0094c16f2b5684ce7e0a23ab3685 < bfc78b4628497eb6df09a6b5bba9dd31616ee175affected
LinuxLinux524353ea480b0094c16f2b5684ce7e0a23ab3685 < f1fa9a9816204ac4b118b2e613d3a7c981355019affected
LinuxLinux524353ea480b0094c16f2b5684ce7e0a23ab3685 < 70f64cb29014e4c4f1fabd3265feebd80590d069affected
LinuxLinux524353ea480b0094c16f2b5684ce7e0a23ab3685 < 0b82eb134d2942ecc669e2ab2be3f0a58d79428aaffected
LinuxLinux524353ea480b0094c16f2b5684ce7e0a23ab3685 < 9708e5081cfc4f085690294163389bcf82655f90affected
LinuxLinux524353ea480b0094c16f2b5684ce7e0a23ab3685 < 7e91ed763dc07437777bd012af7a2bd4493731ffaffected
LinuxLinux4.17affected
LinuxLinux0 < 4.17unaffected
LinuxLinux5.4.276 <= 5.4.*unaffected
LinuxLinux5.10.217 <= 5.10.*unaffected
LinuxLinux5.15.159 <= 5.15.*unaffected
LinuxLinux6.1.91 <= 6.1.*unaffected
LinuxLinux6.6.31 <= 6.6.*unaffected
LinuxLinux6.8.10 <= 6.8.*unaffected
LinuxLinux6.9 <= *unaffected

Weaknesses

ADP Enrichment

CVE Program Container

Additional References

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References