Clocksource/Drivers/Exynos_mct: Handle DTS with Higher Number of Interrupts
Summary
GSD-2022-1001277: clocksource/drivers/exynos_mct: Handle DTS with higher number of interrupts. Affects Kernel versions >= 36ba5d527e9567ed303bad6e86a5f3c2723470f6, < f154834fc36aa70d65801e49e2b09fb303aae296. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Exynos_mct driver is responsible for managing the clocksource on Exynos-based systems. It provides a high-resolution timer for timekeeping purposes. The driver handles interrupts generated by the device tree source (DTS) and ensures accurate timekeeping. However, a vulnerability has been discovered in the driver that affects systems with a higher number of interrupts specified in the DTS.
Vulnerability Detail
The vulnerability in the Exynos_mct driver arises when the DTS specifies a higher number of interrupts than the driver can handle. This can lead to various issues, including incorrect timekeeping, system instability, and potential security risks. An attacker may be able to exploit this vulnerability to manipulate time-sensitive operations or launch timing-based attacks.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
If updating the kernel is not immediately feasible, a possible workaround is to modify the DTS to specify a lower number of interrupts that the Exynos_mct driver can handle. This can be achieved by editing the DTS file and reducing the number of interrupts specified for the Exynos_mct device.
Conclusion
The Exynos_mct driver in the Linux Kernel is vulnerable to handling DTS with a higher number of interrupts. This vulnerability can lead to incorrect timekeeping, system instability, and potential security risks. It is recommended to update the kernel to version v5.17.2 or later to fix this issue. If immediate kernel update is not possible, modifying the DTS to specify a lower number of interrupts can serve as a temporary workaround. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The Exynos_mct driver is responsible for managing the clocksource on Exynos-based systems. It provides a high-resolution timer for timekeeping purposes.
The vulnerability can result in incorrect timekeeping, system instability, and potential security risks. Attackers may exploit this vulnerability to manipulate time-sensitive operations or launch timing-based attacks.
To fix this vulnerability, update the Linux Kernel to version v5.17.2 or later. This update includes the necessary fix for the Exynos_mct driver.
If updating the kernel is not immediately feasible, you can modify the DTS to specify a lower number of interrupts for the Exynos_mct driver. This can be done by editing the DTS file.
For more information about this vulnerability, you can refer to the vulnerability database entry at https://github.com/cloudsecurityalliance/gsd-database/blob/main/2022/1001xxx/GSD-2022-1001277.json
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
