Critical Vulnerability in Linux Package: AXP717 Regulator Ramp Delay Issue
Summary
DEBIAN-CVE-2024-53682: In the Linux kernel, the following vulnerability has been resolved: regulator: axp20x: AXP717: set ramp_delay AXP717 datasheet says that regulator ramp delay is 15.625 us/step, which is 10mV in our case. Affects linux versions < 6.12.6-1. Fixed in 6.12.6-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux package is a core component of the Debian operating system, providing essential functionalities for managing hardware and system resources. It serves as the foundation for various applications and services, ensuring efficient operation of the system. This specific vulnerability relates to the AXP717 regulator, which is responsible for managing voltage levels in devices. The issue arises from an incorrect ramp delay setting, which can lead to system crashes during CPU Dynamic Voltage and Frequency Scaling (DVFS) operations.
Vulnerability Detail
In the Linux kernel, a vulnerability has been identified in the AXP717 regulator related to the ramp delay settings. The AXP717 datasheet specifies a ramp delay of 15.625 microseconds per step, equating to a 10mV change. However, the implementation did not correctly account for this, leading to potential crashes when the CPU attempts to adjust its voltage and frequency dynamically. This flaw can severely impact system stability and performance, especially in environments where power management is critical.
How To Fix
Minimum fixed version
6.12.6-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, there are no specific workarounds provided for this vulnerability. Users are strongly advised to apply the patch as soon as it becomes available to mitigate the risk of system crashes.
Conclusion
The identified vulnerability in the Linux package related to the AXP717 regulator's ramp delay poses significant risks to system stability. Users are urged to update to the patched version 6.12.6-1 to ensure their systems remain secure and operational. Regular monitoring for vulnerabilities using tools like Vulert can help maintain system integrity.
See every vulnerability recorded for linux →
FAQ
The vulnerability involves an incorrect ramp delay setting in the AXP717 regulator, which can lead to system crashes during CPU voltage adjustments.
You can use Vulert's playground at Vulert Scanner to check if your application is affected by this vulnerability without requiring any signup.
The vulnerability can cause system instability and crashes, particularly during CPU Dynamic Voltage and Frequency Scaling operations.
Yes, a patch has been released in version 6.12.6-1 of the Linux package. Users should update to this version or later.
While there are no specific workarounds, it is crucial to prioritize updating your system to mitigate the risks associated with this vulnerability.
References
Related vulnerabilities
Recent vulnerabilities recorded for linux.
