In the Linux kernel, the following vulnerability has been resolved:
i2c: i801: Don't generate an interrupt on bus reset
Now that the i2c-i801 driver supports interrupts, setting the KILL bit in a attempt to recover from a timed out transaction triggers an interrupt. Unfortunately, the interrupt handler (i801_isr) is not prepared for this situation and will try to process the interrupt as if it was signaling the end of a successful transaction. In the case of a block transaction, this can result in an out-of-range memory access.
This condition was reproduced several times by syzbot: https://syzkaller.appspot.com/bug?extid=ed71512d469895b5b34e https://syzkaller.appspot.com/bug?extid=8c8dedc0ba9e03f6c79e https://syzkaller.appspot.com/bug?extid=c8ff0b6d6c73d81b610e https://syzkaller.appspot.com/bug?extid=33f6c360821c399d69eb https://syzkaller.appspot.com/bug?extid=be15dc0b1933f04b043a https://syzkaller.appspot.com/bug?extid=b4d3fd1dfd53e90afd79
So disable interrupts while trying to reset the bus. Interrupts will be enabled again for the following transaction.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-tools-libsUpgrade kernel-zfcpdumpUpgrade kernel-rt-debug-coreUpgrade kernel-debug-modulesUpgrade kernel-zfcpdump-coreUpgrade kernel-abi-stablelistsUpgrade kernel-headersUpgrade kernel-zfcpdump-modulesUpgrade kernel-debug-modules-extraUpgrade kernel-rt-modules-extraUpgrade kernel-modulesUpgrade kernel-debug-develUpgrade kernel-tools-libs-develUpgrade kernel-zfcpdump-develUpgrade kernel-cross-headersUpgrade kernelUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-debug-develUpgrade bpftoolUpgrade perfUpgrade python3-perfUpgrade kernel-develUpgrade kernel-toolsUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-debugUpgrade kernel-rtUpgrade kernel-rt-develUpgrade kernel-debugUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debug-modules-extraUpgrade kernel-coreUpgrade kernel-rt-coreUpgrade kernel-debug-coreUpgrade kernel-modules-extraUpgrade kernel-rt-modulesUpgrade kernel-docUpgrade kernel-rt-kvm | Jun 6, 2024 | Mar 25, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Mar 25, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade kernelUpgrade kernel-tools-libsUpgrade python3-perf | Jul 16, 2024 | Mar 25, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernelUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel-tools-libs | Jul 17, 2024 | Mar 25, 2024 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Jun 6, 2024 | Mar 25, 2024 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | Jun 6, 2024 | Mar 25, 2024 |
| Rocky_linux | — | Upgrade kernel-rt-modules-extraUpgrade kernel-debuginfoUpgrade perfUpgrade python3-perf-debuginfoUpgrade python3-perfUpgrade kernel-rt-coreUpgrade kernel-rt-debugUpgrade kernelUpgrade kernel-rt-develUpgrade kernel-cross-headersUpgrade kernel-modulesUpgrade kernel-debugUpgrade kernel-debug-coreUpgrade kernel-rt-debug-modules-extraUpgrade kernel-develUpgrade kernel-debug-develUpgrade kernel-tools-debuginfoUpgrade kernel-rt-debug-modulesUpgrade kernel-coreUpgrade kernel-rt-kvmUpgrade kernel-rt-debug-kvmUpgrade perf-debuginfoUpgrade bpftoolUpgrade kernel-modules-extraUpgrade kernel-debug-debuginfoUpgrade kernel-rt-debug-develUpgrade kernel-headersUpgrade kernel-rt-debug-coreUpgrade bpftool-debuginfoUpgrade kernel-toolsUpgrade kernel-rtUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-libsUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-debuginfoUpgrade kernel-tools-libs-develUpgrade kernel-debug-modules-extraUpgrade kernel-debug-modules | Jun 17, 2024 | Mar 25, 2024 |
| Suse | — | Upgrade kernel-zfcpdumpUpgrade kernel-default-develUpgrade kernel-64kbUpgrade kernel-default-extraUpgrade kernel-develUpgrade kernel-64kb-develUpgrade kernel-source-azureUpgrade kernel-default-baseUpgrade kernel-preempt-develUpgrade reiserfs-kmp-defaultUpgrade kernel-symsUpgrade kernel-azure-baseUpgrade kernel-azure-develUpgrade kernel-macrosUpgrade kernel-azureUpgrade kernel-sourceUpgrade kernel-docsUpgrade kernel-defaultUpgrade kernel-default-manUpgrade kernel-obs-buildUpgrade kernel-devel-azureUpgrade kernel-syms-azureUpgrade kernel-preempt | Aug 9, 2024 | Mar 25, 2024 |
| Ubuntu | — | Upgrade linux-azure-5.4Upgrade linux-aws-hweUpgrade linux-awsUpgrade linux-fipsUpgrade linux-raspi-5.4Upgrade linux-raspiUpgrade linux-azure-4.15Upgrade linux-bluefieldUpgrade linux-aws-5.4Upgrade linux-oracle-5.4Upgrade linux-azureUpgrade linux-oracleUpgrade linux-kvmUpgrade linux-hweUpgrade linux-gcp-5.4Upgrade linux-gcp-4.15Upgrade linux-aws-fipsUpgrade linuxUpgrade linux-gcp-fipsUpgrade linux-gkeopUpgrade linux-hwe-5.4Upgrade linux-azure-fipsUpgrade linux-gcp | Nov 19, 2024 | Mar 25, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub