CVE-2024-56787

Technical Description

In the Linux kernel, the following vulnerability has been resolved:

soc: imx8m: Probe the SoC driver as platform driver

With driver_async_probe=* on kernel command line, the following trace is

produced because on i.MX8M Plus hardware because the soc-imx8m.c driver

calls of_clk_get_by_name() which returns -EPROBE_DEFER because the clock

driver is not yet probed. This was not detected during regular testing

without driver_async_probe.

Convert the SoC code to platform driver and instantiate a platform device

in its current device_initcall() to probe the platform driver. Rework

.soc_revision callback to always return valid error code and return SoC

revision via parameter. This way, if anything in the .soc_revision callback

return -EPROBE_DEFER, it gets propagated to .probe and the .probe will get

retried later.

"

------------[ cut here ]------------

WARNING: CPU: 1 PID: 1 at drivers/soc/imx/soc-imx8m.c:115 imx8mm_soc_revision+0xdc/0x180

CPU: 1 UID: 0 PID: 1 Comm: swapper/0 Not tainted

Remediation

Check the references section for vendor advisories and patches from linux. Update linux_kernel to the latest patched version. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

Affected Products

References