CVE-2023-52589: Vulnerability in linux-libc-dev package - Fix IRQ disable race issue
Summary
CVE-2023-52589: In the Linux kernel, the following vulnerability has been resolved: media: rkisp1: Fix IRQ disable race issue In rkisp1_isp_stop() and rkisp1_csi_disable() the driver masks the interrupts and then apparently assumes that... Affects linux versions 5.10.103-1 – 6.9.9-1. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The linux-libc-dev package is a development package for the Linux kernel. It provides the necessary header files and libraries for compiling and linking programs that use kernel interfaces. This package is commonly used by developers to build and test kernel modules and other low-level software components. The vulnerability in this package affects the media subsystem, specifically the rkisp1 driver. The vulnerability allows for a race condition where the interrupt handler can still be running while the driver attempts to disable the interrupt. This can lead to board lockup and potential conflicts between the interrupt handler and the code that disables streaming.
Vulnerability Detail
The vulnerability arises in the rkisp1_isp_stop() and rkisp1_csi_disable() functions of the rkisp1 driver. These functions mask interrupts and assume that the interrupt handler won't be running, proceeding with the stop procedure. However, the interrupt handler can still be active, resulting in the ISP being disabled while the interrupt handler is handling a captured frame. This poses two issues: 1) the ISP can be powered off while the interrupt handler is accessing registers, leading to board lockup, and 2) the interrupt handler code and the code that disables streaming may conflict. While the second issue's impact is unclear, the first issue can cause board lockup when a suitable delay is introduced in the interrupt handler.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no known workaround for this vulnerability. It is recommended to apply the official patch provided by the linux-libc-dev package maintainers.
Conclusion
The vulnerability in the linux-libc-dev package's rkisp1 driver can result in board lockup and potential conflicts. It is crucial to update the package to version 6.1.90-1 or later to mitigate this vulnerability. Users can obtain the updated package from the official Debian repositories or through their package manager. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for linux →
FAQ
The linux-libc-dev package is a development package for the Linux kernel, providing header files and libraries for compiling and linking programs that use kernel interfaces.
The rkisp1 driver is a media driver in the Linux kernel that supports Rockchip ISP1 devices, which are used for image and video processing.
The vulnerability can lead to board lockup and potential conflicts between the interrupt handler and the code that disables streaming. This can impact the stability and functionality of systems using the affected linux-libc-dev package.
You can use the Vulert Playground (https://vulert.com/scanner) to check if your system is affected by this vulnerability. Simply upload your manifest file (e.g., package-lock.json) to the playground, and it will provide real-time monitoring and alerts for open-source vulnerabilities.
Yes, the CVSS score for this vulnerability is 4.4, indicating a medium severity level.
Related vulnerabilities
Recent vulnerabilities recorded for linux.
