In the Linux kernel, the following vulnerability has been resolved:
clk: sunxi-ng: Unregister clocks/resets when unbinding
Currently, unbinding a CCU driver unmaps the device's MMIO region, while leaving its clocks/resets and their providers registered. This can cause a page fault later when some clock operation tries to perform MMIO. Fix this by separating the CCU initialization from the memory allocation, and then using a devres callback to unregister the clocks and resets.
This also fixes a memory leak of the `struct ccu_reset`, and uses the correct owner (the specific platform driver) for the clocks and resets.
Early OF clock providers are never unregistered, and limited error handling is possible, so they are mostly unchanged. The error reporting is made more consistent by moving the message inside of_sunxi_ccu_probe.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Apr 10, 2024 |
| Suse | — | Upgrade kernel-azure-livepatch-develUpgrade kernel-azure-optionalUpgrade dlm-kmp-64kbUpgrade kernel-develUpgrade kernel-source-rtUpgrade kernel-rt-livepatchUpgrade kernel-rt-optionalUpgrade cluster-md-kmp-defaultUpgrade cluster-md-kmp-rtUpgrade dtb-qcomUpgrade kernel-debug-livepatch-develUpgrade kernel-kvmsmall-develUpgrade kselftests-kmp-64kbUpgrade kselftests-kmp-azureUpgrade kernel-default-base-rebuildUpgrade reiserfs-kmp-64kbUpgrade cluster-md-kmp-azureUpgrade kernel-devel-rtUpgrade dtb-exynosUpgrade kernel-rtUpgrade dtb-alteraUpgrade dtb-rockchipUpgrade gfs2-kmp-rtUpgrade kernel-obs-qaUpgrade kernel-64kb-livepatch-develUpgrade kernel-default-livepatchUpgrade kernel-rt_debug-develUpgrade ocfs2-kmp-rtUpgrade kernel-rt-vdsoUpgrade dtb-freescaleUpgrade kernel-zfcpdumpUpgrade kernel-default-vdsoUpgrade reiserfs-kmp-azureUpgrade dtb-lgUpgrade kernel-symsUpgrade gfs2-kmp-64kbUpgrade kernel-source-azureUpgrade dtb-mediatekUpgrade kernel-default-optionalUpgrade kernel-default-extraUpgrade dtb-amazonUpgrade kernel-sourceUpgrade kernel-azure-develUpgrade kernel-syms-azureUpgrade dtb-apmUpgrade gfs2-kmp-azureUpgrade kernel-default-develUpgrade ocfs2-kmp-64kbUpgrade dtb-xilinxUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-kvmsmallUpgrade dtb-caviumUpgrade kernel-64kbUpgrade kernel-devel-azureUpgrade kernel-macrosUpgrade kernel-rt-develUpgrade dtb-amlogicUpgrade dtb-armUpgrade dtb-amdUpgrade dtb-socionextUpgrade kernel-default-livepatch-develUpgrade kernel-rt_debug-vdsoUpgrade kernel-azure-baseUpgrade kernel-debugUpgrade kernel-azure-vdsoUpgrade kernel-rt-extraUpgrade kernel-debug-develUpgrade kernel-rt_debugUpgrade kernel-kvmsmall-vdsoUpgrade kernel-source-vanillaUpgrade kernel-64kb-extraUpgrade kselftests-kmp-defaultUpgrade kernel-64kb-develUpgrade dtb-appleUpgrade kernel-64kb-optionalUpgrade kernel-defaultUpgrade dlm-kmp-azureUpgrade dlm-kmp-rtUpgrade kernel-syms-rtUpgrade kernel-default-manUpgrade dlm-kmp-defaultUpgrade gfs2-kmp-defaultUpgrade kernel-azure-extraUpgrade reiserfs-kmp-rtUpgrade kernel-obs-buildUpgrade kernel-docs-htmlUpgrade ocfs2-kmp-defaultUpgrade kernel-rt_debug-livepatch-develUpgrade kselftests-kmp-rtUpgrade kernel-debug-vdsoUpgrade kernel-azureUpgrade dtb-nvidiaUpgrade dtb-hisiliconUpgrade reiserfs-kmp-defaultUpgrade dtb-allwinnerUpgrade cluster-md-kmp-64kbUpgrade ocfs2-kmp-azureUpgrade kernel-docsUpgrade kernel-default-baseUpgrade dtb-sprdUpgrade dtb-renesasUpgrade dtb-marvellUpgrade kernel-rt-livepatch-develUpgrade dtb-broadcom | Aug 9, 2024 | Apr 10, 2024 |
| Ubuntu | — | Upgrade linux-azure-fde-5.15No solution exists | Jun 26, 2025 | Apr 10, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub