Use After Free Vulnerability in Linux Kernel's cdns_i3c_master Driver
Summary
CVE-2024-50061: In the Linux kernel, the following vulnerability has been resolved: i3c: master: cdns: Fix use after free vulnerability in cdns_i3c_master Driver Due to Race Condition In the cdns_i3c_master_probe function, &master->hj_w... Affects linux versions 5.10.103-1 – 6.9.9-1. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is a core component of the operating system that manages hardware and system resources. It provides essential services for all other parts of the operating system. The cdns_i3c_master driver is responsible for managing I3C (Improved Inter-Integrated Circuit) devices, enabling communication between the CPU and various peripherals. This driver is crucial for ensuring efficient data transfer and device management within the Linux environment. However, a vulnerability has been identified in this driver that could lead to severe security issues if exploited.
Vulnerability Detail
The vulnerability identified as CVE-2024-50061 is a use after free (UAF) issue in the cdns_i3c_master driver. This flaw arises from a race condition between the driver’s cleanup process and the execution of scheduled work. Specifically, when the module is removed, the cleanup function cdns_i3c_master_remove is called, which unregisters the master device and frees associated resources. If the scheduled work is still executing at this moment, it may attempt to access the freed memory, leading to potential crashes or arbitrary code execution. This vulnerability can be exploited by an attacker with access to the affected system, posing significant risks to system integrity and security.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a temporary workaround, users can avoid removing the cdns_i3c_master module while any scheduled work is still pending. This can be done by ensuring that all tasks related to the driver are completed before attempting to unload the module.
Conclusion
The CVE-2024-50061 vulnerability in the Linux kernel's cdns_i3c_master driver poses significant risks due to its use after free nature, which can be exploited if not addressed. Users are strongly advised to update their systems to the latest kernel version to mitigate this vulnerability and ensure system security.
See every vulnerability recorded for linux →
FAQ
CVE-2024-50061 is a use after free vulnerability in the cdns_i3c_master driver of the Linux kernel, which can lead to system crashes or arbitrary code execution.
You can use tools like Vulert to monitor and alert for open-source vulnerabilities in your software. Visit Vulert Scanner to check if your application is affected without needing to sign up.
If an immediate update is not possible, ensure that the cdns_i3c_master module is not removed while any scheduled work is still pending to mitigate the risk temporarily.
Yes, this vulnerability is critical as it can lead to severe security implications, including system crashes and potential exploitation by attackers.
More information can be found in the official CVE database or by checking the Linux kernel mailing lists and security advisories.
Related vulnerabilities
Recent vulnerabilities recorded for linux.
