PT-2024-36926 · Linux+3 · Linux Kernel+3

Francesco Dolcini · Published 2024-12-02 · Updated 2025-09-29 · CVE-2024-56618

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.12.0-rc2-0.0.0-devel-00004-g8b1b79e88956

Description A vulnerability in the Linux kernel has been resolved, related to the pmdomain: imx: gpcv2: Adjust delay after power up handshake. The udelay(5) is not enough, sometimes causing a kernel panic still to be triggered. The correct way is to wait for the handshake, but it needs the BUS clock of BLK-CTL to be enabled, which is in a separate driver. So, delay is the only option here. The udelay(10) is a data obtained through experiment.

Recommendations To resolve the issue for Linux kernel versions prior to 6.12.0-rc2-0.0.0-devel-00004-g8b1b79e88956, update to a version that includes the fix for the pmdomain: imx: gpcv2: Adjust delay after power up handshake. As a temporary workaround, consider increasing the delay after power up handshake to udelay(10) to minimize the risk of kernel panic.

Exploit

Fix

Weakness Enumeration

CWE-662

Related Identifiers

ALSA-2025_16880

ALT-PU-2024-17881

BDU:2025-15948

CVE-2024-56618

USN-7379-1

USN-7379-2

USN-7380-1

USN-7381-1

USN-7382-1

Affected Products

Alt Linux

Linuxmint

Linux Kernel

Ubuntu

References · 340

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/56xxx/CVE-2024-56618.json · Exploit
• https://ubuntu.com/security/CVE-2024-56639 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-56593 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-56602 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-56594 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-36476 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-56659 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-56580 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-56588 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-57791 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-57799 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-52319 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-56622 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-56667 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-57895 · Vendor Advisory