PT-2024-32133 · Linux+5 · Linux Kernel+5

Peng Fan

·

Published

2024-08-13

·

Updated

2025-09-29

·

CVE-2024-46706

CVSS v3.1

5.5

Medium

VectorAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description The issue occurs when the kernel is booted with "earlycon initcall debug=1 loglevel=8" in bootargs, causing the kernel to sometimes hang during boot. This happens because the normal console is not ready, but runtime suspend is called, resulting in the early console putchar hanging while waiting for TRDE to be set in UARTSTAT. The lpuart driver has an auto suspend delay of 3000ms, and during uart add one port, a child device serial ctrl is added and probed with its pm runtime enabled. The runtime suspend call path involves device add, bus probe device, device initial probe, and device attach, ultimately leading to pm runtime get sync, pm request idle, and pm runtime put. To address the issue, marking last busy just after pm runtime enable is sufficient, as three seconds is long enough to switch from bootconsole to normal console.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

ALSA-2025_16880
ALT-PU-2024-13260
ALT-PU-2024-13979
BDU:2025-01764
CVE-2024-46706
OESA-2024-2181
OPENSUSE-SU-2024_3551-1
OPENSUSE-SU-2024_3561-1
OPENSUSE-SU-2024_3564-1
SUSE-SU-2024:3551-1
SUSE-SU-2024:3553-1
SUSE-SU-2024:3561-1
SUSE-SU-2024:3564-1
SUSE-SU-2025:20073-1
SUSE-SU-2025:20077-1
USN-7154-1
USN-7154-2
USN-7155-1
USN-7156-1
USN-7196-1

Affected Products

Alt Linux
Linuxmint
Linux Kernel
Red Os
Suse
Ubuntu