Race Condition Vulnerability in Linux Kernel's PMIC Glink Driver
Summary
DEBIAN-CVE-2024-46693: In the Linux kernel, the following vulnerability has been resolved: soc: qcom: pmic_glink: Fix race during initialization As pointed out by Stephen Boyd it is possible that during initialization of the pmic_glink child d... Affects linux versions < 6.10.9-1. Fixed in 6.10.9-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is the core component of many operating systems, including Debian. It manages hardware resources and provides essential services for software applications. The kernel is modular, allowing for various drivers to interface with hardware components. The PMIC Glink driver is responsible for communication with power management integrated circuits (PMICs). This vulnerability arises from a race condition during the initialization of child drivers, potentially leading to system instability.
Vulnerability Detail
In the Linux kernel, a race condition exists in the PMIC Glink driver during the initialization of child drivers. Specifically, the issue arises when the protection-domain notifiers fire before the client registration completes, leading to a NULL pointer dereference when the client pointer is accessed. This can result in a system crash or unexpected behavior, as the code blindly dereferences a NULL pointer. The vulnerability was identified by Stephen Boyd and is present across multiple drivers, including altmode, battery manager, and UCSI child drivers.
How To Fix
Minimum fixed version
6.10.9-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, there are no specific workarounds provided for this vulnerability. It is recommended to apply the patch as soon as it becomes available.
Conclusion
The race condition vulnerability in the Linux kernel's PMIC Glink driver poses a significant risk to system stability. Users are encouraged to update their systems to the patched version to mitigate this risk. Regular monitoring and timely updates are essential for maintaining system security.
See every vulnerability recorded for linux →
FAQ
The vulnerability can lead to a NULL pointer dereference, causing system crashes or unpredictable behavior.
You can use tools like Vulert to monitor and alert for open-source vulnerabilities in your software. Visit Vulert Scanner to check if your application is affected.
The vulnerability affects all versions prior to 6.10.9-1 in Debian 13 and 14.
Yes, a patch is available in version 6.10.9-1 and later. It is recommended to update your package to this version.
While there are no specific workarounds, it is advisable to monitor your system for unusual behavior and apply the update as soon as possible.
References
Related vulnerabilities
Recent vulnerabilities recorded for linux.
