CVE-2024-42153
Linux Kernel i2c pnx Interrupt Handling Timer Deadlock Vulnerability
Description
In the Linux kernel, the following vulnerability has been resolved: i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr When del_timer_sync() is called in an interrupt context it throws a warning because of potential deadlock. The timer is used only to exit from wait_for_completion() after a timeout so replacing the call with wait_for_completion_timeout() allows to remove the problematic timer and its related functions altogether.
INFO
Published Date :
July 30, 2024, 8:15 a.m.
Last Modified :
Aug. 8, 2024, 12:51 p.m.
Source :
416baaa9-dc9f-4396-8d5f-8c081fb06d67
Remotely Exploitable :
No
Impact Score :
3.6
Exploitability Score :
1.8
References to Advisories, Solutions, and Tools
Here, you will find a curated list of external links that provide in-depth
information, practical solutions, and valuable tools related to
CVE-2024-42153.
| URL | Resource |
|---|---|
| https://git.kernel.org/stable/c/27cd3873fa76ebeb9f948baae40cb9a6d8692289 | Mailing List Patch |
| https://git.kernel.org/stable/c/2849a1b747cf37aa5b684527104d3a53f1e296d2 | Mailing List Patch |
| https://git.kernel.org/stable/c/3503372d0bf7b324ec0bd6b90606703991426176 | Mailing List Patch |
| https://git.kernel.org/stable/c/3d32327f5cfc087ee3922a3bcdcc29880dcdb50f | Mailing List Patch |
| https://git.kernel.org/stable/c/92e494a7568b60ae80d57fc0deafcaf3a4029ab3 | Mailing List Patch |
| https://git.kernel.org/stable/c/a349e5ab4dc9954746e836cd10b407ce48f9b2f6 | Mailing List Patch |
| https://git.kernel.org/stable/c/effe0500afda017a86c94482b1e36bc37586c9af | Mailing List Patch |
| https://git.kernel.org/stable/c/f63b94be6942ba82c55343e196bd09b53227618e | Mailing List Patch |
We scan GitHub repositories to detect new proof-of-concept exploits. Following list is a collection of public exploits and proof-of-concepts, which have been published on GitHub (sorted by the most recently updated).
Results are limited to the first 15 repositories due to potential performance issues.
The following list is the news that have been mention
CVE-2024-42153 vulnerability anywhere in the article.
The following table lists the changes that have been made to the
CVE-2024-42153 vulnerability over time.
Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability's severity, exploitability, or other characteristics.
-
Initial Analysis by [email protected]
Aug. 08, 2024
Action Type Old Value New Value Added CVSS V3.1 NIST AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H Changed Reference Type https://git.kernel.org/stable/c/27cd3873fa76ebeb9f948baae40cb9a6d8692289 No Types Assigned https://git.kernel.org/stable/c/27cd3873fa76ebeb9f948baae40cb9a6d8692289 Mailing List, Patch Changed Reference Type https://git.kernel.org/stable/c/2849a1b747cf37aa5b684527104d3a53f1e296d2 No Types Assigned https://git.kernel.org/stable/c/2849a1b747cf37aa5b684527104d3a53f1e296d2 Mailing List, Patch Changed Reference Type https://git.kernel.org/stable/c/3503372d0bf7b324ec0bd6b90606703991426176 No Types Assigned https://git.kernel.org/stable/c/3503372d0bf7b324ec0bd6b90606703991426176 Mailing List, Patch Changed Reference Type https://git.kernel.org/stable/c/3d32327f5cfc087ee3922a3bcdcc29880dcdb50f No Types Assigned https://git.kernel.org/stable/c/3d32327f5cfc087ee3922a3bcdcc29880dcdb50f Mailing List, Patch Changed Reference Type https://git.kernel.org/stable/c/92e494a7568b60ae80d57fc0deafcaf3a4029ab3 No Types Assigned https://git.kernel.org/stable/c/92e494a7568b60ae80d57fc0deafcaf3a4029ab3 Mailing List, Patch Changed Reference Type https://git.kernel.org/stable/c/a349e5ab4dc9954746e836cd10b407ce48f9b2f6 No Types Assigned https://git.kernel.org/stable/c/a349e5ab4dc9954746e836cd10b407ce48f9b2f6 Mailing List, Patch Changed Reference Type https://git.kernel.org/stable/c/effe0500afda017a86c94482b1e36bc37586c9af No Types Assigned https://git.kernel.org/stable/c/effe0500afda017a86c94482b1e36bc37586c9af Mailing List, Patch Changed Reference Type https://git.kernel.org/stable/c/f63b94be6942ba82c55343e196bd09b53227618e No Types Assigned https://git.kernel.org/stable/c/f63b94be6942ba82c55343e196bd09b53227618e Mailing List, Patch Added CWE NIST CWE-667 Added CPE Configuration OR *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 2.6.20 up to (excluding) 4.19.318 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 4.20 up to (excluding) 5.4.280 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 5.5 up to (excluding) 5.10.222 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 5.11 up to (excluding) 5.15.163 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 5.16 up to (excluding) 6.1.98 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 6.2 up to (excluding) 6.6.39 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 6.7 up to (excluding) 6.9.9 *cpe:2.3:o:linux:linux_kernel:6.10:rc1:*:*:*:*:*:* *cpe:2.3:o:linux:linux_kernel:6.10:rc2:*:*:*:*:*:* *cpe:2.3:o:linux:linux_kernel:6.10:rc3:*:*:*:*:*:* *cpe:2.3:o:linux:linux_kernel:6.10:rc4:*:*:*:*:*:* *cpe:2.3:o:linux:linux_kernel:6.10:rc5:*:*:*:*:*:* *cpe:2.3:o:linux:linux_kernel:6.10:rc6:*:*:*:*:*:* -
CVE Received by 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Jul. 30, 2024
Action Type Old Value New Value Added Description In the Linux kernel, the following vulnerability has been resolved: i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr When del_timer_sync() is called in an interrupt context it throws a warning because of potential deadlock. The timer is used only to exit from wait_for_completion() after a timeout so replacing the call with wait_for_completion_timeout() allows to remove the problematic timer and its related functions altogether. Added Reference kernel.org https://git.kernel.org/stable/c/a349e5ab4dc9954746e836cd10b407ce48f9b2f6 [No types assigned] Added Reference kernel.org https://git.kernel.org/stable/c/effe0500afda017a86c94482b1e36bc37586c9af [No types assigned] Added Reference kernel.org https://git.kernel.org/stable/c/2849a1b747cf37aa5b684527104d3a53f1e296d2 [No types assigned] Added Reference kernel.org https://git.kernel.org/stable/c/3503372d0bf7b324ec0bd6b90606703991426176 [No types assigned] Added Reference kernel.org https://git.kernel.org/stable/c/3d32327f5cfc087ee3922a3bcdcc29880dcdb50f [No types assigned] Added Reference kernel.org https://git.kernel.org/stable/c/92e494a7568b60ae80d57fc0deafcaf3a4029ab3 [No types assigned] Added Reference kernel.org https://git.kernel.org/stable/c/27cd3873fa76ebeb9f948baae40cb9a6d8692289 [No types assigned] Added Reference kernel.org https://git.kernel.org/stable/c/f63b94be6942ba82c55343e196bd09b53227618e [No types assigned]
CWE - Common Weakness Enumeration
While CVE identifies
specific instances of vulnerabilities, CWE categorizes the common flaws or
weaknesses that can lead to vulnerabilities. CVE-2024-42153 is
associated with the following CWEs:
Common Attack Pattern Enumeration and Classification (CAPEC)
Common Attack Pattern Enumeration and Classification
(CAPEC)
stores attack patterns, which are descriptions of the common attributes and
approaches employed by adversaries to exploit the CVE-2024-42153
weaknesses.