Lucene search

K
ubuntucveUbuntu.comUB:CVE-2023-52765
HistoryMay 21, 2024 - 12:00 a.m.

CVE-2023-52765

2024-05-2100:00:00
ubuntu.com
ubuntu.com
9
linux kernel
vulnerability
qualcomm spmi pmic
implementation
null-pointer dereference
driver data
locking
struct device reference
probe
hardware
unix

CVSS3

6.2

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

6.3

Confidence

High

EPSS

0

Percentile

15.5%

In the Linux kernel, the following vulnerability has been resolved: mfd:
qcom-spmi-pmic: Fix revid implementation The Qualcomm SPMI PMIC revid
implementation is broken in multiple ways. First, it assumes that just
because the sibling base device has been registered that means that it is
also bound to a driver, which may not be the case (e.g. due to probe
deferral or asynchronous probe). This could trigger a NULL-pointer
dereference when attempting to access the driver data of the unbound
device. Second, it accesses driver data of a sibling device directly and
without any locking, which means that the driver data may be freed while it
is being accessed (e.g. on driver unbind). Third, it leaks a struct device
reference to the sibling device which is looked up using the
spmi_device_from_of() every time a function (child) device is calling the
revid function (e.g. on probe). Fix this mess by reimplementing the revid
lookup so that it is done only at probe of the PMIC device; the base device
fetches the revid info from the hardware, while any secondary SPMI device
fetches the information from the base device and caches it so that it can
be accessed safely from its children. If the base device has not been
probed yet then probe of a secondary device is deferred.

CVSS3

6.2

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

6.3

Confidence

High

EPSS

0

Percentile

15.5%