In the Linux kernel, the following vulnerability has been resolved:
mmc: sdhci-msm: pervent access to suspended controller
Generic sdhci code registers LED device and uses host->runtime_suspended flag to protect access to it. The sdhci-msm driver doesn't set this flag, which causes a crash when LED is accessed while controller is runtime suspended. Fix this by setting the flag correctly.
[
{
"id": "CVE-2024-36029-198816d3",
"target": {
"file": "drivers/mmc/host/sdhci-msm.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"224868205975677040524220507316322504506",
"273062270315659778231705195835934739498",
"26345235572904995273394261564572600245",
"97174789522880891454940329806360994006",
"224868205975677040524220507316322504506",
"199994500944687967376013007489724780806",
"126978435354068237161772740459986410667",
"86893516149151707453094024491412709593",
"32433210010211324050476821483320800482",
"338178283148976242526525821326649293512",
"48411514948552639259589536420191354280",
"82484714412389489461351281880096374951"
]
},
"deprecated": false,
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1200481cd6069d16ce20133bcd86f5825e26a045",
"signature_version": "v1"
},
{
"id": "CVE-2024-36029-b3857eac",
"target": {
"file": "drivers/mmc/host/sdhci-msm.c",
"function": "sdhci_msm_runtime_suspend"
},
"digest": {
"length": 244.0,
"function_hash": "191341092633593677252367907601813943142"
},
"deprecated": false,
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1200481cd6069d16ce20133bcd86f5825e26a045",
"signature_version": "v1"
},
{
"id": "CVE-2024-36029-bd90c3c5",
"target": {
"file": "drivers/mmc/host/sdhci-msm.c",
"function": "sdhci_msm_runtime_resume"
},
"digest": {
"length": 420.0,
"function_hash": "94406360548006738369777407972550536231"
},
"deprecated": false,
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1200481cd6069d16ce20133bcd86f5825e26a045",
"signature_version": "v1"
}
]