CVE-2024-27002

MEDIUM

Linux Kernel 5.2-6.1.87, 6.2-6.6.28, 6.7-6.8.7 - Deadlock via Clock Controller and Genpd Locking

Title source: llm
STIX 2.1

Description

In the Linux kernel, the following vulnerability has been resolved: clk: mediatek: Do a runtime PM get on controllers during probe mt8183-mfgcfg has a mutual dependency with genpd during the probing stage, which leads to a deadlock in the following call stack: CPU0: genpd_lock --> clk_prepare_lock genpd_power_off_work_fn() genpd_lock() generic_pm_domain::power_off() clk_unprepare() clk_prepare_lock() CPU1: clk_prepare_lock --> genpd_lock clk_register() __clk_core_init() clk_prepare_lock() clk_pm_runtime_get() genpd_lock() Do a runtime PM get at the probe function to make sure clk_register() won't acquire the genpd lock. Instead of only modifying mt8183-mfgcfg, do this on all mediatek clock controller probings because we don't believe this would cause any regression. Verified on MT8183 and MT8192 Chromebooks.

Scores

CVSS v3 5.5
EPSS 0.0017
EPSS Percentile 6.9%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-667
Status published
Products (15)
linux/Kernel 5.2.0 - 6.1.88linux
linux/Kernel 6.2.0 - 6.6.29linux
linux/Kernel 6.7.0 - 6.8.8linux
Linux/Linux < 5.2
Linux/Linux 5.2
Linux/Linux 6.1.88 - 6.1.*
Linux/Linux 6.6.29 - 6.6.*
Linux/Linux 6.8.8 - 6.8.*
Linux/Linux 6.9
Linux/Linux acddfc2c261b3653ab1c1b567a427299bac20d31 - 165d226472575b213dd90dfda19d1605dd7c19a8
... and 5 more
Published May 01, 2024
Tracked Since Feb 18, 2026