PT-2025-53195 · Linux+1 · Linux Kernel+1
Published
2023-01-19
·
Updated
2026-02-24
·
CVE-2023-54118
CVSS v2.0
4.6
Medium
| Vector | AV:L/AC:L/Au:S/C:N/I:N/A:C |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
The GPIO controller component of the sc16is7xx driver is initialized prematurely, leading to a potential race condition. This occurs when another device attempts to utilize GPIO lines before the sc16is7xx device has completed its initialization process. The issue manifests as a kernel Oops, specifically an "Unable to handle kernel read from unreadable memory" error, triggered when configuring GPIO lines. The call trace indicates the issue originates within the
sc16is7xx gpio direction output function. The fix involves delaying the setup of the GPIO controller functions to a later stage within the probe function, ensuring the sc16is7xx device is fully initialized before other devices attempt to access the GPIO lines. The error handling has been adjusted to align with the revised initialization sequence.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Race Condition
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Linux Kernel
Sc16Is7Xx