CVEvulnerability
CVE-2023-52645
4.7 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2024-04-17
- Last modified
- 2026-06-17
- Assigner
- 416baaa9-dc9f-4396-8d5f-8c081fb06d67
- CVSS 3.1 ([email protected])
- 4.7 MEDIUM — CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
- Weaknesses
- CWE-362
Description
In the Linux kernel, the following vulnerability has been resolved:
pmdomain: mediatek: fix race conditions with genpd
If the power domains are registered first with genpd and *after that*
the driver attempts to power them on in the probe sequence, then it is
possible that a race condition occurs if genpd tries to power them on
in the same time.
The same is valid for powering them off before unregistering them
from genpd.
Attempt to fix race conditions by first removing the domains from genpd
and *after that* powering down domains.
Also first power up the domains and *after that* register them
to genpd.
Affected configurations
• linux linux kernel (>= 5.11 < 5.15.150)
• linux linux kernel (>= 5.16 < 6.1.80)
• linux linux kernel (>= 6.2 < 6.6.18)
• linux linux kernel (>= 6.7 < 6.7.6)
Related
Weakness · CWE (1)
- CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization weakness
References
- https://git.kernel.org/stable/c/339ddc983bc1622341d95f244c361cda3da3a4ff Patch
- https://git.kernel.org/stable/c/3cd1d92ee1dbf3e8f988767eb75f26207397792b Patch
- https://git.kernel.org/stable/c/475426ad1ae0bfdfd8f160ed9750903799392438 Patch
- https://git.kernel.org/stable/c/c41336f4d69057cbf88fed47951379b384540df5 Patch
- https://git.kernel.org/stable/c/f83b9abee9faa4868a6fac4669b86f4c215dae25 Patch
- https://git.kernel.org/stable/c/339ddc983bc1622341d95f244c361cda3da3a4ff Patch
- https://git.kernel.org/stable/c/3cd1d92ee1dbf3e8f988767eb75f26207397792b Patch
- https://git.kernel.org/stable/c/475426ad1ae0bfdfd8f160ed9750903799392438 Patch
- https://git.kernel.org/stable/c/c41336f4d69057cbf88fed47951379b384540df5 Patch
- https://git.kernel.org/stable/c/f83b9abee9faa4868a6fac4669b86f4c215dae25 Patch