PT-2024-29840 · Linux+5 · Linux Kernel+5
Published
2024-07-15
·
Updated
2025-10-02
·
CVE-2024-42290
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 6.6.50
Description
The vulnerability is related to the irqchip/imx-irqsteer component in the Linux kernel, which handles runtime power management. On certain platforms, such as i.MX8QM and i.MX8QXP, the power-on handling invokes sleeping functions, triggering a 'scheduling while atomic' bug in the context switch path during device probing. This can lead to a denial-of-service condition. The issue is resolved by implementing the irq bus lock/sync unlock() interrupt chip callbacks and handling power management in them as they are invoked from non-atomic context.
Recommendations
To resolve the issue, update the Linux kernel to version 6.6.50 or later. As a temporary workaround, consider disabling the irqchip/imx-irqsteer component until a patch is available. However, this may have unintended consequences and should be done with caution.
At the moment, there is no information about other versions that contain a fix for this vulnerability.
Exploit
Fix
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Astra Linux
Linuxmint
Linux Kernel
Red Os
Suse
Ubuntu