tty: serial: fsl_lpuart: mark last busy before uart_add_one_port (Linux Linux)

CVE-2024-46706
MEDIUM 5.5

En bref

Source
NVD
EPSS
EPSS 0.21 % · centile 12 ()
État
PUBLISHED
Publiée
Mise à jour
Attribuée par
Linux
Statut NVD
Analyzed

Description

In the Linux kernel, the following vulnerability has been resolved: tty: serial: fsl_lpuart: mark last busy before uart_add_one_port With "earlycon initcall_debug=1 loglevel=8" in bootargs, kernel sometimes boot hang. It is because normal console still is not ready, but runtime suspend is called, so early console putchar will hang in waiting TRDE set in UARTSTAT. The lpuart driver has auto suspend delay set to 3000ms, but during uart_add_one_port, a child device serial ctrl will added and probed with its pm runtime enabled(see serial_ctrl.c). The runtime suspend call path is: device_add |-> bus_probe_device |->device_initial_probe |->__device_attach |-> pm_runtime_get_sync(dev->parent); |-> pm_request_idle(dev); |-> pm_runtime_put(dev->parent); So in the end, before normal console ready, the lpuart get runtime suspended. And earlycon putchar will hang. To address the issue, mark last busy just after pm_runtime_enable, three seconds is long enough to switch from bootconsole to normal console.

Références

Scores

VersionScoreVecteurÉvalué par
CVSS 3.1MEDIUM 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HNVD · nvd@nist.gov (Primary)

Références européennes

Avis du CERT-FR

Configurations affectées (CPE NVD)

Produits affectés

ProduitVersions
Linux · Linuxaffected 43543e6f539b3e646348c253059f75e27d63c94d < 8eb92cfca6c2c5a15ab1773f3d18ab8d8f7dbb68 ; affected 43543e6f539b3e646348c253059f75e27d63c94d < 3ecf625d4acb71d726bc0b49403cf68388b3d58d ; affected 43543e6f539b3e646348c253059f75e27d63c94d < dc98d76a15bc29a9a4e76f2f65f39f3e590fb15c
Linux · Linuxaffected 6.2 ; unaffected 0 < 6.2 ; unaffected 6.6.48 ≤ 6.6.* ; unaffected 6.10.7 ≤ 6.10.* ; unaffected 6.11 ≤ *

Sources

SourceLicence
CVE List (CVEProject cvelistV5)CVE Program Terms of Use
EPSS (FIRST.org)FIRST — attribution requested
ENISA EUVDENISA — reproduction authorised, source acknowledged
CERT-FR (ANSSI)Licence Ouverte / Etalab 2.0
NVD (NIST) via fkie-cad/nvd-json-data-feedsPublic domain — this product uses data from the NVD API but is not endorsed or certified by the NVD