Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2024-56787— soc: imx8m: Probe the SoC driver as platform driver

EPSS 0.01% · P3
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2024-56787

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
soc: imx8m: Probe the SoC driver as platform driver
Source: NVD (National Vulnerability Database)
Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved: soc: imx8m: Probe the SoC driver as platform driver With driver_async_probe=* on kernel command line, the following trace is produced because on i.MX8M Plus hardware because the soc-imx8m.c driver calls of_clk_get_by_name() which returns -EPROBE_DEFER because the clock driver is not yet probed. This was not detected during regular testing without driver_async_probe. Convert the SoC code to platform driver and instantiate a platform device in its current device_initcall() to probe the platform driver. Rework .soc_revision callback to always return valid error code and return SoC revision via parameter. This way, if anything in the .soc_revision callback return -EPROBE_DEFER, it gets propagated to .probe and the .probe will get retried later. " ------------[ cut here ]------------ WARNING: CPU: 1 PID: 1 at drivers/soc/imx/soc-imx8m.c:115 imx8mm_soc_revision+0xdc/0x180 CPU: 1 UID: 0 PID: 1 Comm: swapper/0 Not tainted 6.11.0-next-20240924-00002-g2062bb554dea #603 Hardware name: DH electronics i.MX8M Plus DHCOM Premium Developer Kit (3) (DT) pstate: 20000005 (nzCv daif -PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : imx8mm_soc_revision+0xdc/0x180 lr : imx8mm_soc_revision+0xd0/0x180 sp : ffff8000821fbcc0 x29: ffff8000821fbce0 x28: 0000000000000000 x27: ffff800081810120 x26: ffff8000818a9970 x25: 0000000000000006 x24: 0000000000824311 x23: ffff8000817f42c8 x22: ffff0000df8be210 x21: fffffffffffffdfb x20: ffff800082780000 x19: 0000000000000001 x18: ffffffffffffffff x17: ffff800081fff418 x16: ffff8000823e1000 x15: ffff0000c03b65e8 x14: ffff0000c00051b0 x13: ffff800082790000 x12: 0000000000000801 x11: ffff80008278ffff x10: ffff80008209d3a6 x9 : ffff80008062e95c x8 : ffff8000821fb9a0 x7 : 0000000000000000 x6 : 00000000000080e3 x5 : ffff0000df8c03d8 x4 : 0000000000000000 x3 : 0000000000000000 x2 : 0000000000000000 x1 : fffffffffffffdfb x0 : fffffffffffffdfb Call trace: imx8mm_soc_revision+0xdc/0x180 imx8_soc_init+0xb0/0x1e0 do_one_initcall+0x94/0x1a8 kernel_init_freeable+0x240/0x2a8 kernel_init+0x28/0x140 ret_from_fork+0x10/0x20 ---[ end trace 0000000000000000 ]--- SoC: i.MX8MP revision 1.1 "
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Linux kernel 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞，该漏洞源于i.MX8M Plus硬件的SoC驱动在异步探测时，由于时钟驱动尚未探测完成，导致soc-imx8m.c驱动的of_clk_get_by_name调用返回-EPROBE_DEFER，进而影响SoC驱动的正常加载和系统启动。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
LinuxLinux a7e26f356ca12906a164d83c9e9f8527ee7da022 ~ e497edb8f31ec2c2b6f4ce930e175aa2da8be334 -
LinuxLinux 5.2 -

II. Public POCs for CVE-2024-56787

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2024-56787

请登录查看更多情报信息。

Same Patch Batch · Linux · 2025-01-08 · 16 CVEs total

CVE-2024-56770net/sched: netem: account for backlog updates from child qdisc
CVE-2024-56771mtd: spinand: winbond: Fix 512GW, 01GW, 01JW and 02JW ECC information
CVE-2024-56773kunit: Fix potential null dereference in kunit_device_driver_test()
CVE-2024-56772kunit: string-stream: Fix a UAF bug in kunit_init_suite()
CVE-2024-56774btrfs: add a sanity check for btrfs root in btrfs_search_slot()
CVE-2024-56775drm/amd/display: Fix handling of plane refcount
CVE-2024-56776drm/sti: avoid potential dereference of error pointers
CVE-2024-56777drm/sti: avoid potential dereference of error pointers in sti_gdp_atomic_check
CVE-2024-56778drm/sti: avoid potential dereference of error pointers in sti_hqvdp_atomic_check
CVE-2024-56779nfsd: fix nfs4_openowner leak when concurrent nfsd4_open occur
CVE-2024-56780quota: flush quota_release_work upon quota writeback
CVE-2024-56782ACPI: x86: Add adev NULL check to acpi_quirk_skip_serdev_enumeration()
CVE-2024-56783netfilter: nft_socket: remove WARN_ON_ONCE on maximum cgroup level
CVE-2024-56785MIPS: Loongson64: DTS: Really fix PCIe port nodes for ls7a
CVE-2024-56784drm/amd/display: Adding array index check to prevent memory corruption

IV. Related Vulnerabilities

Same product: Linux
Same vendor: Linux

V. Comments for CVE-2024-56787

No comments yet

Leave a comment