PT-2024-29867 · Linux+6 · Linux Kernel+6
Published
2024-07-18
·
Updated
2026-05-26
·
CVE-2024-42319
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
A vulnerability in the Linux kernel has been resolved, related to the mailbox: mtk-cmdq component. When mtk-cmdq unbinds, a WARN ON message with condition pm runtime get sync() < 0 occurs. The root cause is calling pm runtime get sync() after calling pm runtime disable(). The CMDQ driver uses devm mbox controller register() in cmdq probe() to bind the cmdq device to the mbox controller, and devm mbox controller unregister() will automatically unregister the device bound to the mailbox controller when the device-managed resource is removed. To fix this problem, cmdq probe() needs to move devm mbox controller register() after devm pm runtime enable() to make devm pm runtime disable() be called after devm mbox controller unregister().
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Astra Linux
Debian
Linuxmint
Linux Kernel
Red Os
Suse
Ubuntu