CVE-2024-56691

Summary

In the Linux kernel, the following vulnerability has been resolved:

mfd: intel_soc_pmic_bxtwc: Use IRQ domain for USB Type-C device

While design wise the idea of converting the driver to use the hierarchy of the IRQ chips is correct, the implementation has (inherited) flaws. This was unveiled when platform_get_irq() had started WARN() on IRQ 0 that is supposed to be a Linux IRQ number (also known as vIRQ).

Rework the driver to respect IRQ domain when creating each MFD device separately, as the domain is not the same for all of them.

Affected Software

VendorProductVersion RangeStatus
LinuxLinux9c6235c8633210cc2da0882e2e9d6ff90aa37503 < 0997e77c51330c2866a4f39480e762cca92ad953affected
LinuxLinux9c6235c8633210cc2da0882e2e9d6ff90aa37503 < 0b648968bfa4f5c9c4983bca9f2de17626ed6fb6affected
LinuxLinux9c6235c8633210cc2da0882e2e9d6ff90aa37503 < 23230ac3c5ca3f154b64849d1cf50583b4e6b98caffected
LinuxLinux9c6235c8633210cc2da0882e2e9d6ff90aa37503 < c310e6916c0b297011d0fec03f168a6b24e9e984affected
LinuxLinux9c6235c8633210cc2da0882e2e9d6ff90aa37503 < e1ef62e8d262e3f27446d26742208c1c81e9ee18affected
LinuxLinux9c6235c8633210cc2da0882e2e9d6ff90aa37503 < 518e414d24e7037d6cc7198e942bf47fe6f5e8e1affected
LinuxLinux9c6235c8633210cc2da0882e2e9d6ff90aa37503 < 87a07a5b0b296e489c606ca95ffc16c18821975baffected
LinuxLinux9c6235c8633210cc2da0882e2e9d6ff90aa37503 < 686fb77712a4bc94b76a0c5ae74c60118b7a0d79affected
LinuxLinux4.9affected
LinuxLinux0 < 4.9unaffected
LinuxLinux5.4.287 <= 5.4.*unaffected
LinuxLinux5.10.231 <= 5.10.*unaffected
LinuxLinux5.15.174 <= 5.15.*unaffected
LinuxLinux6.1.120 <= 6.1.*unaffected
LinuxLinux6.6.64 <= 6.6.*unaffected
LinuxLinux6.11.11 <= 6.11.*unaffected
LinuxLinux6.12.2 <= 6.12.*unaffected
LinuxLinux6.13 <= *unaffected

Weaknesses

ADP Enrichment

CVE Program Container

Additional References

References