CVE-2024-56682

Summary

In the Linux kernel, the following vulnerability has been resolved:

irqchip/riscv-aplic: Prevent crash when MSI domain is missing

If the APLIC driver is probed before the IMSIC driver, the parent MSI domain will be missing, which causes a NULL pointer dereference in msi_create_device_irq_domain().

Avoid this by deferring probe until the parent MSI domain is available. Use dev_err_probe() to avoid printing an error message when returning -EPROBE_DEFER.

Affected Software

VendorProductVersion RangeStatus
LinuxLinuxca8df97fe6798afbe395fc4a8e23bac0c7fbd248 < 285a07810ab3bcedc2bd380ebacbf6b4942a889aaffected
LinuxLinuxca8df97fe6798afbe395fc4a8e23bac0c7fbd248 < 1f181d1cda56c2fbe379c5ace1aa1fac6306669eaffected
LinuxLinux6.10affected
LinuxLinux0 < 6.10unaffected
LinuxLinux6.12.2 <= 6.12.*unaffected
LinuxLinux6.13 <= *unaffected

Weaknesses

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References