In the Linux kernel, the following vulnerability has been resolved:
i2c: i801: Don't generate an interrupt on bus reset
Now that the i2c-i801 driver supports interrupts, setting the KILL bit in a attempt to recover from a timed out transaction triggers an interrupt. Unfortunately, the interrupt handler (i801_isr) is not prepared for this situation and will try to process the interrupt as if it was signaling the end of a successful transaction. In the case of a block transaction, this can result in an out-of-range memory access.
This condition was reproduced several times by syzbot: https://syzkaller.appspot.com/bug?extid=ed71512d469895b5b34e https://syzkaller.appspot.com/bug?extid=8c8dedc0ba9e03f6c79e https://syzkaller.appspot.com/bug?extid=c8ff0b6d6c73d81b610e https://syzkaller.appspot.com/bug?extid=33f6c360821c399d69eb https://syzkaller.appspot.com/bug?extid=be15dc0b1933f04b043a https://syzkaller.appspot.com/bug?extid=b4d3fd1dfd53e90afd79
So disable interrupts while trying to reset the bus. Interrupts will be enabled again for the following transaction.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-tools-libsUpgrade kernel-rt-debug-develUpgrade kernel-headersUpgrade kernel-rt-debug-kvmUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-zfcpdump-modulesUpgrade kernel-zfcpdump-develUpgrade kernel-tools-libs-develUpgrade kernel-modulesUpgrade kernel-debug-modulesUpgrade kernel-rt-debug-coreUpgrade kernel-cross-headersUpgrade kernel-zfcpdumpUpgrade kernel-zfcpdump-coreUpgrade kernel-debug-modules-extraUpgrade kernel-rt-modules-extraUpgrade kernel-debug-develUpgrade kernel-debug-coreUpgrade kernel-rt-kvmUpgrade kernel-rt-develUpgrade kernel-rt-modulesUpgrade kernel-rt-debugUpgrade kernel-toolsUpgrade perfUpgrade kernel-rtUpgrade bpftoolUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-coreUpgrade kernel-docUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-debugUpgrade kernel-coreUpgrade kernel-rt-debug-modulesUpgrade kernel-develUpgrade python3-perfUpgrade kernel-modules-extra | Jun 6, 2024 | Mar 25, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Mar 25, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernelUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernel-tools | Jul 16, 2024 | Mar 25, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-tools-libsUpgrade kernel-toolsUpgrade python3-perfUpgrade kernel | Jul 17, 2024 | Mar 25, 2024 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Jun 6, 2024 | Mar 25, 2024 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | Jun 6, 2024 | Mar 25, 2024 |
| Rocky_linux | — | Upgrade kernel-rt-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-modulesUpgrade kernel-tools-libsUpgrade kernel-rt-debug-develUpgrade kernel-rt-debuginfo-common-x86_64Upgrade bpftool-debuginfoUpgrade kernel-headersUpgrade kernel-rt-debug-coreUpgrade kernel-debug-debuginfoUpgrade kernel-rtUpgrade kernel-toolsUpgrade kernel-debug-modules-extraUpgrade kernel-tools-libs-develUpgrade kernel-debug-modulesUpgrade kernel-develUpgrade kernel-coreUpgrade kernel-rt-modules-extraUpgrade kernel-debuginfoUpgrade kernel-debug-develUpgrade python3-perfUpgrade kernel-rt-debug-kvmUpgrade kernelUpgrade kernel-modules-extraUpgrade kernel-debugUpgrade kernel-cross-headersUpgrade kernel-modulesUpgrade kernel-rt-coreUpgrade perfUpgrade kernel-rt-debugUpgrade kernel-rt-kvmUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-develUpgrade perf-debuginfoUpgrade kernel-rt-debug-modules-extraUpgrade kernel-debug-coreUpgrade kernel-tools-debuginfoUpgrade bpftoolUpgrade python3-perf-debuginfo | Jun 17, 2024 | Mar 25, 2024 |
| Suse | — | Upgrade reiserfs-kmp-defaultUpgrade kernel-zfcpdumpUpgrade kernel-azure-baseUpgrade kernel-symsUpgrade kernel-default-extraUpgrade kernel-preempt-develUpgrade kernel-64kbUpgrade kernel-64kb-develUpgrade kernel-develUpgrade kernel-default-baseUpgrade kernel-default-develUpgrade kernel-source-azureUpgrade kernel-azureUpgrade kernel-docsUpgrade kernel-azure-develUpgrade kernel-obs-buildUpgrade kernel-sourceUpgrade kernel-devel-azureUpgrade kernel-macrosUpgrade kernel-default-manUpgrade kernel-defaultUpgrade kernel-syms-azureUpgrade kernel-preempt | Aug 9, 2024 | Mar 25, 2024 |
| Ubuntu | — | Upgrade linux-gcpUpgrade linux-azure-fipsUpgrade linux-gcp-fipsUpgrade linux-hwe-5.4Upgrade linux-gcp-5.4Upgrade linux-gkeopUpgrade linux-aws-fipsUpgrade linux-gcp-4.15Upgrade linux-hweUpgrade linuxUpgrade linux-awsUpgrade linux-azure-5.4Upgrade linux-kvmUpgrade linux-fipsUpgrade linux-aws-5.4Upgrade linux-bluefieldUpgrade linux-oracle-5.4Upgrade linux-aws-hweUpgrade linux-azure-4.15Upgrade linux-raspi-5.4Upgrade linux-raspiUpgrade linux-oracleUpgrade linux-azure | Nov 19, 2024 | Mar 25, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub