CVE-2024-56671

MEDIUM

Linux Kernel vGPIO Driver - Memory Corruption

Title source: llm
STIX 2.1

Description

In the Linux kernel, the following vulnerability has been resolved: gpio: graniterapids: Fix vGPIO driver crash Move setting irq_chip.name from probe() function to the initialization of "irq_chip" struct in order to fix vGPIO driver crash during bootup. Crash was caused by unauthorized modification of irq_chip.name field where irq_chip struct was initialized as const. This behavior is a consequence of suboptimal implementation of gpio_irq_chip_set_chip(), which should be changed to avoid casting away const qualifier. Crash log: BUG: unable to handle page fault for address: ffffffffc0ba81c0 /#PF: supervisor write access in kernel mode /#PF: error_code(0x0003) - permissions violation CPU: 33 UID: 0 PID: 1075 Comm: systemd-udevd Not tainted 6.12.0-rc6-00077-g2e1b3cc9d7f7 #1 Hardware name: Intel Corporation Kaseyville RP/Kaseyville RP, BIOS KVLDCRB1.PGS.0026.D73.2410081258 10/08/2024 RIP: 0010:gnr_gpio_probe+0x171/0x220 [gpio_graniterapids]

Scores

CVSS v3 5.5
EPSS 0.0019
EPSS Percentile 8.8%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

Status published
Products (9)
linux/Kernel 6.10.0 - 6.12.6linux
Linux/Linux < 6.10
Linux/Linux 6.10
Linux/Linux 6.12.6 - 6.12.*
Linux/Linux 6.13
Linux/Linux ecc4b1418e2399753af7ef304d01f45e8e942286 - e631cab10c6b287a33c35953e6dbda1f7f89bc1f
Linux/Linux ecc4b1418e2399753af7ef304d01f45e8e942286 - eb9640fd1ce666610b77f5997596e9570a36378f
linux/linux_kernel 6.13 rc1 (2 CPE variants)
linux/linux_kernel 6.10 - 6.12.6
Published Dec 27, 2024
Tracked Since Feb 18, 2026