PT-2024-11125 · Linux · Linux Kernel

Published

2021-04-16

·

Updated

2024-12-06

·

CVE-2021-47025

CVSS v3.1

7.8

High

VectorAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.12.0
Description The issue is related to the iommu/mediatek component in the Linux kernel. In the mtk iommu runtime resume function, the clock is not always enabled, which can cause a warning when the 'suspend' callback disables the clock that is already disabled. This warning is triggered by the clk core disable function. The problem arises when m4u dom is null, and the 'suspend' callback might disable the clock, leading to the warning. The affected hardware includes Google Elm (DT). The vulnerability is resolved by always enabling the clock in mtk iommu runtime resume, even if m4u dom is null.
Recommendations To resolve the issue, update the Linux kernel to version 5.12.0 or later. As a temporary workaround, consider modifying the mtk iommu runtime resume function to always enable the clock, even if m4u dom is null, until a patch is available.

Fix

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

BDU:2025-05312
CVE-2021-47025

Affected Products

Linux Kernel