PT-2024-14595 · Linux+6 · Linux Kernel+6
Published
2023-12-11
·
Updated
2025-03-13
·
CVE-2023-52488
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
The issue concerns the SC16IS7XX IC, which supports a burst mode to access FIFOs. In this mode, the initial register address is sent, followed by all the FIFO data without resending the register address. The
regmap raw read() and regmap raw write() functions perform IO over multiple registers and are used to read/write from/to the FIFO. However, they would corrupt the regmap cache if it was not disabled manually, as they assume the register address is incremented when the R/W size is more than 1 byte. The solution involves converting FIFO R/W functions to use the regmap noinc versions, removing the need for manual cache control.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Information Disclosure
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Astra Linux
Linuxmint
Linux Kernel
Red Os
Sc16Is7Xx
Suse
Ubuntu