In the Linux kernel, the following vulnerability has been resolved:
drm/lima: fix shared irq handling on driver remove
lima uses a shared interrupt, so the interrupt handlers must be prepared to be called at any time. At driver removal time, the clocks are disabled early and the interrupts stay registered until the very end of the remove process due to the devm usage. This is potentially a bug as the interrupts access device registers which assumes clocks are enabled. A crash can be triggered by removing the driver in a kernel with CONFIGDEBUGSHIRQ enabled. This patch frees the interrupts at each lima device finishing callback so that the handlers are already unregistered by the time we fully disable clocks.
{ "vanir_signatures": [ { "id": "CVE-2024-42127-1b72a6d2", "signature_type": "Line", "target": { "file": "drivers/gpu/drm/lima/lima_mmu.c" }, "signature_version": "v1", "digest": { "line_hashes": [ "10638812385095876807941325041392765589", "66680425721561401168837764636204026166", "121391744549970690156566403743667354366", "58864110648994675281516239223965908663" ], "threshold": 0.9 }, "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@0d60c43df59ef01c08dc7b0c45495178f9d05a13" }, { "id": "CVE-2024-42127-28744484", "signature_type": "Line", "target": { "file": "drivers/gpu/drm/lima/lima_gp.c" }, "signature_version": "v1", "digest": { "line_hashes": [ "116470558347917981221856615307272420772", "212211189376889240320174154358465015667", "156483960431576850369880880547137556254", "223680624733176128824222779231221260334" ], "threshold": 0.9 }, "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@0d60c43df59ef01c08dc7b0c45495178f9d05a13" }, { "id": "CVE-2024-42127-4ec1aeef", "signature_type": "Line", "target": { "file": "drivers/gpu/drm/lima/lima_pp.c" }, "signature_version": "v1", "digest": { "line_hashes": [ "185711123771631473790892062007705402701", "255508169163321876121554156498242848893", "176524536976628067610728124523641571501", "129510170295185965505456393772333575879", "96694805351838848176365646483986519886", "321549490747045403423190241095472850345", "184116365306085053755116341866411819818", "159914392972509060847226643729563824095" ], "threshold": 0.9 }, "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a6683c690bbfd1f371510cb051e8fa49507f3f5e" }, { "id": "CVE-2024-42127-4f39e59e", "signature_type": "Line", "target": { "file": "drivers/gpu/drm/lima/lima_gp.c" }, "signature_version": "v1", "digest": { "line_hashes": [ "116470558347917981221856615307272420772", "212211189376889240320174154358465015667", "156483960431576850369880880547137556254", "223680624733176128824222779231221260334" ], "threshold": 0.9 }, "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b5daf9217a50636a969bc1965f827878aeb09ffe" }, { "id": "CVE-2024-42127-81c94ac6", "signature_type": "Line", "target": { "file": "drivers/gpu/drm/lima/lima_gp.c" }, "signature_version": "v1", "digest": { "line_hashes": [ "116470558347917981221856615307272420772", "212211189376889240320174154358465015667", "156483960431576850369880880547137556254", "223680624733176128824222779231221260334" ], "threshold": 0.9 }, "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a6683c690bbfd1f371510cb051e8fa49507f3f5e" }, { "id": "CVE-2024-42127-9d830052", "signature_type": "Line", "target": { "file": "drivers/gpu/drm/lima/lima_gp.c" }, "signature_version": "v1", "digest": { "line_hashes": [ "116470558347917981221856615307272420772", "212211189376889240320174154358465015667", "156483960431576850369880880547137556254", "223680624733176128824222779231221260334" ], "threshold": 0.9 }, "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@0a487e977cb8897ae4c51ecd34bbaa2b005266c9" }, { "id": "CVE-2024-42127-a4402a4e", "signature_type": "Line", "target": { "file": "drivers/gpu/drm/lima/lima_mmu.c" }, "signature_version": "v1", "digest": { "line_hashes": [ "5303516761368233861906248519000198032", "66680425721561401168837764636204026166", "13746554156926195022334012463891768490", "82822414818368188136590690497938862989" ], "threshold": 0.9 }, "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@0a487e977cb8897ae4c51ecd34bbaa2b005266c9" }, { "id": "CVE-2024-42127-b352a79e", "signature_type": "Line", "target": { "file": "drivers/gpu/drm/lima/lima_mmu.c" }, "signature_version": "v1", "digest": { "line_hashes": [ "5303516761368233861906248519000198032", "66680425721561401168837764636204026166", "13746554156926195022334012463891768490", "82822414818368188136590690497938862989" ], "threshold": 0.9 }, "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a6683c690bbfd1f371510cb051e8fa49507f3f5e" }, { "id": "CVE-2024-42127-c5434cb6", "signature_type": "Line", "target": { "file": "drivers/gpu/drm/lima/lima_pp.c" }, "signature_version": "v1", "digest": { "line_hashes": [ "185711123771631473790892062007705402701", "255508169163321876121554156498242848893", "176524536976628067610728124523641571501", "129510170295185965505456393772333575879", "96694805351838848176365646483986519886", "321549490747045403423190241095472850345", "184116365306085053755116341866411819818", "159914392972509060847226643729563824095" ], "threshold": 0.9 }, "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b5daf9217a50636a969bc1965f827878aeb09ffe" }, { "id": "CVE-2024-42127-ca4f5516", "signature_type": "Line", "target": { "file": "drivers/gpu/drm/lima/lima_pp.c" }, "signature_version": "v1", "digest": { "line_hashes": [ "185711123771631473790892062007705402701", "255508169163321876121554156498242848893", "176524536976628067610728124523641571501", "129510170295185965505456393772333575879", "96694805351838848176365646483986519886", "321549490747045403423190241095472850345", "184116365306085053755116341866411819818", "159914392972509060847226643729563824095" ], "threshold": 0.9 }, "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@0a487e977cb8897ae4c51ecd34bbaa2b005266c9" }, { "id": "CVE-2024-42127-de57ee51", "signature_type": "Line", "target": { "file": "drivers/gpu/drm/lima/lima_pp.c" }, "signature_version": "v1", "digest": { "line_hashes": [ "185711123771631473790892062007705402701", "255508169163321876121554156498242848893", "329403551811658133150475084340691236144", "27838566573377399796521769765214352112", "96694805351838848176365646483986519886", "321549490747045403423190241095472850345", "184116365306085053755116341866411819818", "159914392972509060847226643729563824095" ], "threshold": 0.9 }, "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@0d60c43df59ef01c08dc7b0c45495178f9d05a13" }, { "id": "CVE-2024-42127-e7d961cf", "signature_type": "Line", "target": { "file": "drivers/gpu/drm/lima/lima_mmu.c" }, "signature_version": "v1", "digest": { "line_hashes": [ "5303516761368233861906248519000198032", "66680425721561401168837764636204026166", "13746554156926195022334012463891768490", "82822414818368188136590690497938862989" ], "threshold": 0.9 }, "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b5daf9217a50636a969bc1965f827878aeb09ffe" } ] }