CVE-2024-56739

Summary

In the Linux kernel, the following vulnerability has been resolved:

rtc: check if __rtc_read_time was successful in rtc_timer_do_work()

If the __rtc_read_time call fails,, the struct rtc_time tm; may contain uninitialized data, or an illegal date/time read from the RTC hardware.

When calling rtc_tm_to_ktime later, the result may be a very large value (possibly KTIME_MAX). If there are periodic timers in rtc->timerqueue, they will continually expire, may causing kernel softlockup.

Affected Software

VendorProductVersion RangeStatus
LinuxLinux6610e0893b8bc6f59b14fed7f089c5997f035f88 < 39ad0a1ae17b54509cd9e93dcd8cec16e7c12d3faffected
LinuxLinux6610e0893b8bc6f59b14fed7f089c5997f035f88 < 44b3257ff705d63d5f00ef8ed314a0eeb7ec37f2affected
LinuxLinux6610e0893b8bc6f59b14fed7f089c5997f035f88 < 0d68e8514d9040108ff7d1b37ca71096674b6efeaffected
LinuxLinux6610e0893b8bc6f59b14fed7f089c5997f035f88 < 246f621d363988e7040f4546d20203dc713fa3e1affected
LinuxLinux6610e0893b8bc6f59b14fed7f089c5997f035f88 < fde56535505dde3336df438e949ef4742b6d6d6eaffected
LinuxLinux6610e0893b8bc6f59b14fed7f089c5997f035f88 < dd4b1cbcc916fad5d10c2662b62def9f05e453d4affected
LinuxLinux6610e0893b8bc6f59b14fed7f089c5997f035f88 < a1f0b4af90cc18b10261ecde56c6a56b22c75bd1affected
LinuxLinux6610e0893b8bc6f59b14fed7f089c5997f035f88 < e77bce0a8c3989b4173c36f4195122bca8f4a3e1affected
LinuxLinux6610e0893b8bc6f59b14fed7f089c5997f035f88 < e8ba8a2bc4f60a1065f23d6a0e7cbea945a0f40daffected
LinuxLinux2.6.38affected
LinuxLinux0 < 2.6.38unaffected
LinuxLinux4.19.325 <= 4.19.*unaffected
LinuxLinux5.4.287 <= 5.4.*unaffected
LinuxLinux5.10.231 <= 5.10.*unaffected
LinuxLinux5.15.174 <= 5.15.*unaffected
LinuxLinux6.1.120 <= 6.1.*unaffected
LinuxLinux6.6.64 <= 6.6.*unaffected
LinuxLinux6.11.11 <= 6.11.*unaffected
LinuxLinux6.12.2 <= 6.12.*unaffected
LinuxLinux6.13 <= *unaffected

Weaknesses

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

CVE Program Container

Additional References

References