In the Linux kernel, the following vulnerability has been resolved:
platform/x86: x86-android-tablets: Unregister devices in reverse order
Not all subsystems support a device getting removed while there are still consumers of the device with a reference to the device.
One example of this is the regulator subsystem. If a regulator gets unregistered while there are still drivers holding a reference a WARN() at drivers/regulator/core.c:5829 triggers, e.g.:
WARNING: CPU: 1 PID: 1587 at drivers/regulator/core.c:5829 regulator_unregister Hardware name: Intel Corp. VALLEYVIEW C0 PLATFORM/BYT-T FFD8, BIOS BLADE_21.X64.0005.R00.1504101516 FFD8_X64_R_2015_04_10_1516 04/10/2015 RIP: 0010:regulator_unregister Call Trace: <TASK> regulator_unregister devres_release_group i2c_device_remove device_release_driver_internal bus_remove_device device_del device_unregister x86_android_tablet_remove
On the Lenovo Yoga Tablet 2 series the bq24190 charger chip also provides a 5V boost converter output for powering USB devices connected to the micro USB port, the bq24190-charger driver exports this as a Vbus regulator.
On the 830 (8") and 1050 ("10") models this regulator is controlled by a platform_device and x86_android_tablet_remove() removes platform_device-s before i2c_clients so the consumer gets removed first.
But on the 1380 (13") model there is a lc824206xa micro-USB switch connected over I2C and the extcon driver for that controls the regulator. The bq24190 i2c-client *must* be registered first, because that creates the regulator with the lc824206xa listed as its consumer. If the regulator has not been registered yet the lc824206xa driver will end up getting a dummy regulator.
Since in this case both the regulator provider and consumer are I2C devices, the only way to ensure that the consumer is unregistered first is to unregister the I2C devices in reverse order of in which they were created.
For consistency and to avoid similar problems in the future change x86_android_tablet_remove() to unregister all device types in reverse order.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | No solution existsUpgrade linux | May 15, 2025 | Jul 12, 2024 |
| Suse | — | Upgrade kernel-develUpgrade cluster-md-kmp-defaultUpgrade kernel-kvmsmall-develUpgrade kselftests-kmp-defaultUpgrade dlm-kmp-azureUpgrade ocfs2-kmp-rtUpgrade kernel-rt-develUpgrade dtb-hisiliconUpgrade kernel-symsUpgrade kernel-obs-qaUpgrade dtb-apmUpgrade kernel-kvmsmallUpgrade kernel-default-optionalUpgrade dtb-armUpgrade dtb-xilinxUpgrade gfs2-kmp-rtUpgrade reiserfs-kmp-defaultUpgrade kernel-64kb-develUpgrade dtb-renesasUpgrade ocfs2-kmp-defaultUpgrade gfs2-kmp-64kbUpgrade kernel-default-baseUpgrade reiserfs-kmp-azureUpgrade kernel-devel-rtUpgrade dtb-amlogicUpgrade dtb-qcomUpgrade kernel-defaultUpgrade dtb-mediatekUpgrade kernel-default-livepatch-develUpgrade kernel-default-extraUpgrade dtb-amdUpgrade cluster-md-kmp-rtUpgrade ocfs2-kmp-azureUpgrade kernel-zfcpdumpUpgrade kernel-64kb-livepatch-develUpgrade kernel-docsUpgrade kernel-debugUpgrade kselftests-kmp-rtUpgrade dtb-rockchipUpgrade kernel-default-base-rebuildUpgrade cluster-md-kmp-azureUpgrade kernel-debug-develUpgrade kernel-default-vdsoUpgrade dtb-allwinnerUpgrade kernel-macrosUpgrade kernel-64kb-optionalUpgrade kernel-devel-azureUpgrade reiserfs-kmp-64kbUpgrade dtb-nvidiaUpgrade reiserfs-kmp-rtUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-exynosUpgrade kernel-azure-vdsoUpgrade kernel-syms-rtUpgrade kernel-syms-azureUpgrade dtb-socionextUpgrade dtb-caviumUpgrade kernel-debug-vdsoUpgrade kernel-debug-livepatch-develUpgrade dtb-marvellUpgrade dlm-kmp-rtUpgrade kernel-azure-develUpgrade kselftests-kmp-64kbUpgrade kernel-rt_debugUpgrade kernel-rt-vdsoUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-default-livepatchUpgrade gfs2-kmp-azureUpgrade dtb-appleUpgrade dtb-amazonUpgrade kernel-rt_debug-develUpgrade kernel-rt-extraUpgrade dtb-alteraUpgrade kselftests-kmp-azureUpgrade kernel-64kbUpgrade kernel-default-develUpgrade dtb-sprdUpgrade kernel-azure-livepatch-develUpgrade kernel-obs-buildUpgrade kernel-docs-htmlUpgrade dtb-lgUpgrade kernel-azure-extraUpgrade kernel-azure-optionalUpgrade gfs2-kmp-defaultUpgrade kernel-rt-optionalUpgrade kernel-rtUpgrade kernel-kvmsmall-vdsoUpgrade kernel-sourceUpgrade kernel-source-rtUpgrade dtb-broadcomUpgrade kernel-rt-livepatch-develUpgrade kernel-azureUpgrade kernel-64kb-extraUpgrade cluster-md-kmp-64kbUpgrade ocfs2-kmp-64kbUpgrade dlm-kmp-64kbUpgrade kernel-source-azureUpgrade dlm-kmp-defaultUpgrade kernel-rt_debug-vdsoUpgrade kernel-source-vanillaUpgrade dtb-freescale | Aug 8, 2024 | Jul 12, 2024 |
| Ubuntu | — | Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-oracle-64kUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-oem-22.04cUpgrade linux-image-6.8.0-45-genericUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-1013-nvidia-64kUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-generic-64kUpgrade linux-image-awsUpgrade linux-image-ibmUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-azureUpgrade linux-image-6.8.0-44-lowlatency-64kUpgrade linux-image-6.8.0-1014-azureUpgrade linux-image-virtualUpgrade linux-image-6.8.0-1014-azure-fdeUpgrade linux-image-6.8.0-44-genericUpgrade linux-image-6.8.0-1012-oemUpgrade linux-image-kvmUpgrade linux-image-oem-22.04bUpgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-45-generic-64kUpgrade linux-image-gcpUpgrade linux-image-gkeUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-1013-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1012-ibmUpgrade linux-image-6.8.0-1012-oracle-64kUpgrade linux-image-oem-22.04dUpgrade linux-image-6.8.0-44-generic-64kUpgrade linux-image-6.8.0-44-lowlatencyUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.8.0-1013-nvidia-lowlatencyUpgrade linux-image-raspiUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1011-raspiUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-azure-fdeUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-1014-gcpUpgrade linux-image-6.8.0-1012-oracleUpgrade linux-image-nvidiaUpgrade linux-image-lowlatencyUpgrade linux-image-genericUpgrade linux-image-6.8.0-1013-nvidiaUpgrade linux-image-6.8.0-1010-gkeUpgrade linux-image-nvidia-6.8Upgrade linux-image-oem-22.04Upgrade linux-image-oem-22.04aUpgrade linux-image-oracleUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-1015-aws | Sep 12, 2024 | Jul 12, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub